IFWXSession Interface

The IFWXSession interface is implemented by the Microsoft Firewall service on the session object. The IFWXSession interface is used to attach a data filter to a session and to monitor the session's events.

The session object implements session-specific functions that impersonate the user account, test access control lists (ACLs) against the session user, retrieve information about the client computer, and perform protocol operations.

For more information about how the IFWXSession interface is used in application filters, see Filter Object Model.

Syntax

interface IFWXSession : IUnknown

Methods

The IFWXSession interface inherits the methods of the IUnknown interface.

In addition, IFWXSession defines the following methods.

Method Description

GetClientAddress

Retrieves the address of the user.

GetClientMachineName

Retrieves the name of the client computer, if it is available. The Forefront TMG Client or Firewall Client computer passes the computer name in the request. The name is not available for SecureNAT clients.

GetAuthenticatedUser

Retrieves an IFWXAuthenticatedUser interface that represents the authenticated user for the session.

HostAccessCheck

Checks the permission of the session user to access a specified host, by using the access rules.

AllowFutureConnect

Allows the session's client to make a secondary outbound connection.

BindForClient

Binds a set of addresses on behalf of the session's client and creates the required instances of the IFWXConnection interface in preparation for secondary inbound connections.

EmulateClientBind

Allows a client that did not create a remote bind to receive a primary inbound connection.

GetSessionFlags

Retrieves flags that provide information about the session.

RedirectConnections

Enables connections by using a local, internal Microsoft Firewall service address.

AttachFilter

Causes a filter to be loaded for this session, even if the initial event for this filter has not yet happened. If the filter has already attached a session filter for this session, nothing happens. Otherwise, the filter's IFWXFilter::AttachToSession method is called.

SetDataFilterFactory

Allows a filter to set a data filter factory for events for which the filter is not registered. This method can be used to reduce the number of events for which a filter registers.

RetroactiveAllowBind

Allows a Forefront TMG Client or Firewall Client computer to receive a secondary inbound connection on a socket that was previously bound by the Forefront TMG Client or Firewall Client computer, but was not necessarily approved by the Microsoft Firewall service.

CreateNetworkSocket

Creates a TCP/IP socket that is associated with this session.

GetHostByName

Retrieves host information corresponding to a host name. This method is similar to the Winsock gethostbyname function.

GetHostByAddr

Retrieves host information corresponding to an address.

Requirements

Server Requires Windows Server 2008 R2 or Windows Server 2008 x64 Edition with SP2.
Version Requires Forefront Threat Management Gateway (TMG) 2010.
Header

Declared in Wspfwext.idl.

See Also

Filter Interfaces

Send comments about this topic to Microsoft

Build date: 6/30/2010