Monitoring Windows Firewall
Using FrameFlow's Registry Event Monitor to Innovate New Monitoring Solutions
FrameFlow IT Monitoring: Solutions for Every Use Case
With a roster of over one hundred event monitors, FrameFlow is proud to offer a monitoring solution for every use case. The versatility of our product doesn’t end there, though. Several of our event monitors have inherent flexibility that allows them to be adapted for new uses, such as the Registry Event Monitor.
Interactive and Innovative Customer Support
One of our customers, a natural disaster alerting organization, needs to ensure that Windows Firewall is always running on each of their systems. They contacted us with their request, detailing the monitoring action required. Working with our technical support staff, our customer was able to achieve a solution: while we don’t have a dedicated firewall event monitor, our Registry Event Monitor is perfect for the job.
We often tell our customers that just because we don't have an event monitor designed specifically for your custom monitoring action, it doesn't mean we can't accomplish it for you. Many of our monitors are a blank canvas for hundreds of potential use cases (and if not, there's always the PowerShell Event Monitor, with which you can write script to carry out monitoring tasks).
How to Monitor Windows Firewall with FrameFlow
To begin monitoring Windows Firewall with FrameFlow, you’ll need the following key:
SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters \FirewallPolicy\DomainProfile
Enter this value in the Windows Registry Event Monitor in the field labeled "Key". Under "Value Name", enter "EnableFirewall". This value will be set to 1 if the firewall is running and 0 if it is not. To configure alerts based on firewall status, use the option "Alert if the value is less than a specified value". Enter "1" under the level of alert you wish to receive if the firewall isn’t running.
For example, in the image above, the "1" is entered in the text box labeled "Error". This will trigger a success when Windows Firewall is found to be running, and an error alert when it is not. If you want to receive a warning or critical alert instead, enter the "1" in the corresponding box.
Summary
This quick article taught you how to monitor Windows Firewall using outside-the-box innovation. Do you have a monitoring task you'd like our help with? Take a page from this customer's book and contact us. We'll see what we can do! For more monitoring tidbits and useful tips and tricks, check out our Features page, updated weekly with the latest tutorials.