Windows Firewall policy changes like new program exceptions enabling/disabling/deleting policies can be monitored and detected with EventSentry along to detection when firewall is disabled. Enabling Policies Changes Audit In order to monitor Microsoft Windows Firewall policy changes the subcategory MPSSVC rulelevel Policy Chang...

KB-ID 429
Category: Monitoring

The EventSentry management console and services excluding the agent need access to the following: Application Process URLs / IPs Purpose Management Console eventsentrygui.exe Patch/Setup Download...

KB-ID 455
Category: Security
Applies to: 4.x and later