Windows 10: How to see firewall log for outbound connections?

Is there a way to view firewall log for the last 24 hours for all processes that have started outbound connections?

submitted by /u/evolution800
[link] [comments]

:)

 

Windows 10 Firewall - outbound 'block all' causes Windows to need Re-activating after a while

Hi,

I wonder if anyone could help me please? I am rather security conscious and go a step further than most people - I BLOCK all OUTBOUND firewall connections BY DEFAULT. I then create specific 'allow' rules to allow each friendly application through my firewall
to access the internet. This is to:

a) Protect my system from initiating mysterious outbound connections all over the internet from apps preinstalled that I have no idea do what. Hopefully this would also ensure my computer was never used as an internet bot (if it got compromised).

b) Allows me to control every application that 'I' know and pre-approve that application accessing the internet.

c) Seems a sensible, and wise thing to do.

d) Saves data transmissions costs when I'm paying for the internet connection (I want to use my allowance on what I want to do).

Hopefully the above doesn't seem unreasonable?

It's all been working perfectly for two weeks, when I was surprised to find that Windows 10 requires re-activation when it can't 'call home'. I have spent three hours of quality of time with Microsoft call centre, but haven't found anyone who knows what
blocking outbound firewall connections actually means. I was lucky enough to get them to reactivate my genuine copy of windows after much haggling and persuasion (phew!). But my outbound firewall blocking is definitely causing problems/complications that
Windows doesn't like.

I would like to please ask, I have Googled (or should I say Bing'd) this topic, but there's not much (ZERO) out there on:

1) What minimum list of applications does Windows require for OUTBOUND firewall connectivity. For instance there's lots that can AND SHOULD be blocked by default (Adobe Reader needs outbound connectivity by default? - I think not!).

2) For Windows Upgrade to work (inc online Activation / checkup) what applications / services need to 'call home' on a regular basis (so that I can create outbound rules that work just for those).

3) Windows Firewall logging is abysmal - it's not user friendly to decipher when it's blocking stuff that's requesting access. Plus there's no notifications.

4) Some people are suggesting allowing svchost.exe outbound access, but that seems to be a catchall for lots of applications to access the internet.

Thank you for your time reading this and replying if you're an absolute wizard on Windows Firewall )

 

Outbound rules still show as allowed.

Why do all of the default (pre-defined) MS Firewall outbound rules still show as allowed when I have set outbound connections to block for the Domain, Private and Public profiles? Shouldn't setting outbound connections to block block everything in the outbound list?

 

Firewall setup?

said:


When outbound connections is set to allow is basically every app and service allowed through the firewall?



TairikuOkami "Yes, but if you have only trusted apps installed, it is not really an issue."

Does this mean that when I install an app that requires an outbound connection it still won't even show in the outbound rules list when outbound connections is set to allow?