Question:
The Summary of Collection section shows that we are failing to collect Netstat. Can you tell us why this is failing?
Answer:
The Netstat collection feature utilizes the SMB protocol, typically over TCP port 445 (TCP/IP) or TCP port 139 (NetBIOS). This will fail if there are firewall restrictions against this traffic on the target servers or in the network layer. The operation of the feature produces log messages in the Windows Event Viewer, reviewing the logs will determine if the activity is taking place.
