Eventlog entry for allowed connection in Windows Firewall

Posted by Jaap on Server Fault See other posts from Server Fault or by Jaap
Published on 2012-10-01T14:27:05Z Indexed on 2012/10/01 15:41 UTC
Read the original article Hit count: 279

I was seeing a lot of entries in the eventlog:

The Windows Filtering Platform has permitted a connection.
Application Information:
    Process ID:                4
    Application Name:          System
Network Information:
    Direction:                  Inbound
    Source Address:             10.xxx.xxx.xxx
    Source Port:                80
    Destination Address:        10.xxx.xxx.xxx
    Destination Port:           31773
    Protocol:                   6
Filter Information:
    Filter Run-Time ID:         67903
    Layer Name:                 Receive/Accept
    Layer Run-Time ID:          44

We have a loadbalancer which checks every second to see if the application is still running (a health check). The logs contain large amounts of this kind of entries, which makes the Event Viewer slow and it's difficult to find the more interesting logs.

How do I make sure these messages don't end up in the event logs?

© Server Fault or respective owner

Related posts about windows-server-2008-r2

Related posts about firewall