Monitoring firewall state on Windows?

[benign]

I know how to monitor the service itself, but how would you monitor the state of the firewall as it applies to individual profiles? (domain/private/public).

[LenR]

I'm going to test this:

UserParamater=win.advfirewall,netsh advfirewall show AllProfiles state | find /c "OFF"

Any value > 0 is bad.

[benign]

I'm going to test this:

UserParamater=win.advfirewall,netsh advfirewall show AllProfiles state | find /c "OFF"

Any value > 0 is bad.

I ended up making a simple powershell script for each firewall profile:

$data = netsh advfirewall show domainprofile
$data = $data[3]
$data -Match "ON"

created an item:
system.run[powershell.exe -command c:\Zabbix_Agent\scripts\DomainFirewallStatus.ps1]

and a trigger:
{Test-Firewall-State:system.run[powershell.exe -command c:\Zabbix_Agent\scripts\DomainFirewallStatus.ps1].str(True)}=0

The scripts have to be on the local machines. They run and return either True or False. If the trigger is not true, then the alert is triggered.

[alientm]

Can You step by step (maybe with screenshots) show how You to start monitoring windows firewall? How exactly does your script and where to write it, how to start script?

[LenR]

I've also learned that Windows will sometimes report false status using these methods. It appears on systems where firewall policy has been set locally and via GPO inconsistently and in systems with multiple nics with different firewall status.

I'm not a Windows admin, I just have to listen to their complaints about Zabbix tests...

[alientm]

See here, maybe it will help. For me it is not



https://www.reddit.com/r/nagios/comm...rewall_status/

https://exchange.nagios.org/directory/Plugins/Operating-Systems/Windows-NRPE/Check-Windows-Firewall/details

[Denis_86]

Windows Firewall State

Windows Firewall State
Windows Firewall State.zip

[pinguin123]

Itrigger:
{Test-Firewall-State:system.run[powershell.exe -command c:\Zabbix_Agent\scripts\DomainFirewallStatus.ps1].str(True)}=0

Apparently it doesn't work anymore for version 3.x. How should it look like in version 3.x?

[pinguin123]

Solved. A wrong data type in "items" was selected.

[dtnetwork]

Solved. A wrong data type in "items" was selected.

Hi, whats item type choose?

Thanks

[frater]

https://share.zabbix.com/cat-app/fir...ndows-firewall