Endpoint Protection Small Business Edition

When I tested the SEP 11, I cannot find any reports related to the SEP firewall except the log query result. However, the log query result only had few hours data. Is there any enhancement in the SEP 12?

If I want to keep the firewall logs for forensics purpose, how can I do?

Hi,

You need to check this in the monitors tab
Go to monitors tab click on logs
select Network threat protection
select, attack, traffic or logs
click on advanced tab
here you would have option to select specific dates ( one year max)
Hope this was helpful for others as this post is old :)

Rafeeq