We would like to distribute a firewall program with our product.
I can configure the Windows Firewall to block outgoing connections (which it does not by default)
netsh advfirewall set allprofiles firewallpolicy blockinbound,blockoutbound
But then I need to know when one is blocked so it can ask if it should be unblocked.
I tried turning on logging, but it does not log the path to the exe. Is there a way to get that logged?
I posted a question on StackOverflow to try an event detection method, but if there was a way to turn on logging of the path to the exe, I wanted to know about it. I hope to stay with Java which is limited in event detection.
I don't mind calling any command-line programs, also don't mind using vbscripts. But what I need is to know as soon as an outgoing connection from an exe is blocked and which exe.