Physical log location for SEP12 client logs

Hello all,

i need to know where the logs are for SEP 12 client, specifically NTP firewall blocked log. We are deploying 12.1.3over 11.7 and we need to quickly prove what is being blocked on each client to eliminate finger pointing when apllications run into trouble performing. We will be using a powershell script to grab all the logs to a central location to parse for blocked traffic.

Thanks in advance!