WFP Filtering Sublayer Identifiers (Compact 2013)

3/26/2014

The WFP sub-layer identifiers are each represented by a GUID.

The following table defines these identifiers:

Sub-layer

Description

FWPM_SUBLAYER_RPC_AUDIT

RPC audit filters are added to this sub-layer. These filters audit RPC incoming calls as part of C2 and common criteria compliance.

FWPM_SUBLAYER_IPSEC_TUNNEL

IPsec tunnel filters are added to this sub-layer.

FWPM_SUBLAYER_UNIVERSAL

This sub-layer hosts all filters that are not assigned to any of the other sub-layers.

FWPM_SUBLAYER_LIPS

Legacy IPsec filters are added to this sub-layer.

FWPM_SUBLAYER_SECURE_SOCKET

Secure socket filters are added to this sub-layer.

FWPM_SUBLAYER_TCP_CHIMNEY_OFFLOAD

TCP Chimney Offload filters are added to this sub-layer.

FWPM_SUBLAYER_INSPECTION

This is the lowest weighted sub-layer. It is used only for inspection filters.

See Also

Reference

WFP Constants
WFP Access Right Identifiers
WFP Built-in Callout Identifiers
WFP Built-in Keying Module Identifiers
WFP Built-in Provider Context Identifiers
WFP Built-in Provider Identifiers
WFP Filter Context Identifiers
WFP Filter Weight Identifiers
WFP Filtering Conditions
WFP Filtering Layer Identifiers
WFP Error Codes

Other Resources

Windows Filtering Platform