SAM Monitor

Question

Can Solarwinds SAM monitor following :

* AD NTDS database
* Can SAM monitor windows firewall for active and dropped connections
* DC NTP and drift compare to NTP source
* ADFS / Azure AD
* AD replication 
* Sysvol and Netlogon share on DC

Monitor the Availability of Domain Controllers ( ICMP, LDAP query , AD services, netlogon service , DFSR )

designerfx · Answer

Also, not SAM specific but if you have NTA and are getting traffic flows you at least should be seeing what is effectively being permitted through the Windows Firewall and also be able to alert on specific traffic.

mesverrum · Answer

It looks like you just need to turn on the logging for windows firewall and then cook up some kind of script to parse the log files.  Absolutely within the capabilities of SAM, but requires someone to build that script.

https://www.itprotoday.com/security/q-how-can-i-generate-windows-firewall-packet-log-shows-all-incoming-network-packets-…

This article also includes some extra description of the fields to help with the script building

How to Track Firewall Activity with the Windows Firewall Log

alankar.srivastava · Answer

Thanks designerfx  &  mesverrum  .

But i doubt solarwinds SAM is capable to monitor windows firewall active/drop connections.

Please suggest if you have any suggestions to implement this monitor in SAM.