How to monitor Windows firewall status?

Not sure about the win fw status but just yesterday I was also looking to create an alert for an Asset Inventory object. I had to create a "Custom SWQL Alert" for that. Might be the same for most Asset Inventory objects. 

So, start with SWQL studio and try to create a query for that :-)

Thanks for the response - I can see variables for pretty much all asset inventory - system information apart from the Windows firewall status - seems strange that this one would be intentionally omitted?

Agree and wasn't sure on how to create this but created this. Try it!

The code to add to the alert trigger condition:

INNER JOIN (
SELECT 
     S.NodeID
FROM Orion.AssetInventory.ServerInformation AS S
WHERE
    (S.FirewallDomainProfile + s.FirewallPublicProfile + s.FirewallStandartProfile)<1
) AS T ON Nodes.nodeid=T.nodeid

I'm not sure if the where part should have "<3" or "<1". In my test env "<1" was correct but please test.

I've just tested this and it works with '<1' - Thank you so much for your help!!