Network Protocol Security
You will not know if you have configured network security properly unless you monitor it. Start by using the IP Security Policies MMC snap-in or the Netsh command to create an IP Security policy. Once this has been done, you can use the IP Security Monitor MMC snap-in and the Netsh or Netdiag command to monitor security.
The IP Security Monitor MMC snap-in is accessed by typing MMC in the Run text box and adding the IP Security Monitor snap-in. By default, there is no link to this under administrative tools but you could always create one. Once you have started the MMC and added the snap-in, the tools look as shown below:
This server has an active policy that requests IP Security. Policies must already be activated with either IP Security or Netsh for you to be able to monitor them with IP
Security Monitor. With IP Security Monitor, you can retrieve details about the policy that is applied, the main and quick mode statistics, and the current security associations.