The ability to see when users are logging on locally to a server and changing the firewall features/settings (such as turning (On/Off)
Would like to see when users are changing /adding/editing firewall ports
Ability to see when users are also changing things such as network adapters or changing IP settings locally