WinSecWiki > Security Settings > Advanced Audit Policies > Object Access > Filtering Platform Connection
Audit Filtering Platform Connection
As the name would indicate, this category logs events associated with network connections permitted or blocked by Windows Firewall and the lower level Windows Filtering Platform. What's it doing in the higher level Object Access category? Who knows. To configure this on Server 2008 and Vista you must use auditpol. Windows 7 and Server 2008 R2 and later can use Group Policy.
Coverage on events generated by this category are currently in the Security Log Encyclopedia:
Back to top