Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 4097 Source: WinSSHD

Source
Level
Description
[361] WinSSHD 5.15: An error occcurred while attempting to remove all WinSSHD exceptions in the Windows Firewall: The 'Windows Firewall/Internet Connection Sharing (ICS)' service is not running.
Comments
 
According to a post in the WinSSHD support forum, this event indicates that WinSSHD is not able to remove any WinSSHD made Windows Firewall exceptions, because the firewall service is not running.

Every time WinSSHD is started, it will try to remove any lingering WinSSHD firewall exceptions in case the previous WinSSHD instance failed to remove them before its termination.

If the Windows Firewall is disabled on purpose, the WinSSHD can be configured to ignore it:
- Open Easy settings and uncheck "Open Windows Firewall", or go to the Advanced settings, Server,   Windows Firewall and set both values to Do not change firewall settings.
- WinSSHD will no longer warn you about firewall not running.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...