Hi
We are migrating 200 PC from endpoint antivirus to endpoint security.
We will enable Firewall, with custom rules (active directory, vpn, professionnal app...)
We want to generate a repport with all blocked connection ( Like TCP 3389, UDP 137 ...) for all computers for 7 days.
It will help us to check if all rules are OK and if we don't forget any app or network share.
I try to enable diagnostics logs by policy but don't work and seem to display a yellow notification on coputer every 5 minutes
I try to enable Log collection on Eset protect computer logs, but it did nothing.
Do you have a kb or experience to share ?
Thanks