Find out which process or application is blocked by Windows Firewall

• 1 In PowerShell:
  auditpol /set /subcategory:"{0CCE9226-69AE-11D9-BED3-505054503030}" /success:disable /failure:enable
  
• 2 Event viewer -> Windows logs -> Security
  Filter by Keywords -> Select "Audit failure"
  
• 3 Get application name, destination IP, connection direction and more.
  
• N Set success and failure logging options as needed when finished.
  

References

• https://serverfault.com/questions/316428/does-windows-firewall-have-the-ability-to-log-which-exe-is-blocked