Filtering condition data types

The data type for the condition value for each filtering condition is specified as an FWP_DATA_TYPE value as follows.

Filtering condition identifier Condition value data type

FWPM_CONDITION_IP_LOCAL_ADDRESS

For an IPv4 address:

FWP_V4_ADDR_MASK or FWP_UINT32

For an IPv6 address:

FWP_V6_ADDR_MASK or FWP_BYTE_ARRAY16_TYPE

FWPM_CONDITION_IP_REMOTE_ADDRESS

For an IPv4 address:

FWP_V4_ADDR_MASK or FWP_UINT32

For an IPv6 address:

FWP_V6_ADDR_MASK or FWP_BYTE_ARRAY16_TYPE

FWPM_CONDITION_IP_SOURCE_ADDRESS

For an IPv4 address:

FWP_V4_ADDR_MASK or FWP_UINT32

For an IPv6 address:

FWP_V6_ADDR_MASK or FWP_BYTE_ARRAY16_TYPE

FWPM_CONDITION_IP_DESTINATION_ADDRESS

For an IPv4 address:

FWP_V4_ADDR_MASK or FWP_UINT32

For an IPv6 address:

FWP_V6_ADDR_MASK or FWP_BYTE_ARRAY16_TYPE

FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE

FWP_UINT8

FWPM_CONDITION_IP_DESTINATION_ADDRESS_TYPE

FWP_UINT8

FWPM_CONDITION_IP_LOCAL_INTERFACE

FWP_UINT64

FWPM_CONDITION_IP_FORWARD_INTERFACE

FWP_UINT64

FWPM_CONDITION_IP_PROTOCOL

FWP_UINT8

FWPM_CONDITION_IP_LOCAL_PORT

FWP_UINT16

FWPM_CONDITION_IP_REMOTE_PORT

FWP_UINT16

FWPM_CONDITION_ICMP_TYPE

FWP_UINT16

FWPM_CONDITION_ICMP_CODE

FWP_UINT16

FWPM_CONDITION_EMBEDDED_LOCAL_ADDRESS_TYPE

FWP_UINT8

FWPM_CONDITION_EMBEDDED_REMOTE_ADDRESS

For an IPv4 address:

FWP_V4_ADDR_MASK or FWP_UINT32

For an IPv6 address:

FWP_V6_ADDR_MASK or FWP_BYTE_ARRAY16_TYPE

FWPM_CONDITION_EMBEDDED_PROTOCOL

FWP_UINT8

FWPM_CONDITION_EMBEDDED_LOCAL_PORT

FWP_UINT16

FWPM_CONDITION_EMBEDDED_REMOTE_PORT

FWP_UINT16

FWPM_CONDITION_FLAGS

FWP_UINT32

FWPM_CONDITION_DIRECTION

FWP_UINT32

FWPM_CONDITION_INTERFACE_INDEX

FWP_UINT32

FWPM_CONDITION_SUB_INTERFACE_INDEX

FWP_UINT32

FWPM_CONDITION_SOURCE_INTERFACE_INDEX

FWP_UINT32

FWPM_CONDITION_SOURCE_SUB_INTERFACE_INDEX

FWP_UINT32

FWPM_CONDITION_DESTINATION_INTERFACE_INDEX

FWP_UINT32

FWPM_CONDITION_DESTINATION_SUB_INTERFACE_INDEX

FWP_UINT32

FWPM_CONDITION_ALE_APP_ID

FWP_BYTE_BLOB_TYPE

FWPM_CONDITION_ALE_USER_ID

FWP_SECURITY_DESCRIPTOR_TYPE

FWPM_CONDITION_ALE_REMOTE_USER_ID

FWP_SECURITY_DESCRIPTOR_TYPE

FWPM_CONDITION_ALE_REMOTE_MACHINE_ID

FWP_SECURITY_DESCRIPTOR_TYPE

FWPM_CONDITION_ALE_PROMISCUOUS_MODE

FWP_UNIT32

FWPM_CONDITION_ALE_SIO_FIREWALL_SYSTEM_PORT

FWP_UINT32

FWPM_CONDITION_ALE_NAP_CONTEXT

FWP_UINT32

FWPM_CONDITION_REMOTE_USER_TOKEN

FWP_SECURITY_DESCRIPTOR_TYPE

FWPM_CONDITION_RPC_IF_UUID

FWP_BYTE_ARRAY16_TYPE

FWPM_CONDITION_RPC_IF_VERSION

FWP_UINT16

FWPM_CONDITION_RPC_IF_FLAG

FWP_UINT32

FWPM_CONDITION_DCOM_APP_ID

FWP_BYTE_ARRAY16_TYPE

FWPM_CONDITION_IMAGE_NAME

FWP_BYTE_BLOB_TYPE

FWPM_CONDITION_RPC_PROTOCOL

FWP_UINT8

FWPM_CONDITION_RPC_AUTH_TYPE

FWP_UINT8

FWPM_CONDITION_RPC_AUTH_LEVEL

FWP_UINT8

FWPM_CONDITION_SEC_ENCRYPT_ALGORITHM

FWP_UINT32

FWPM_CONDITION_SEC_KEY_SIZE

FWP_UINT32

FWPM_CONDITION_IP_LOCAL_ADDRESS_V4

FWP_V4_ADDR_MASK or FWP_UINT32

FWPM_CONDITION_IP_LOCAL_ADDRESS_V6

FWP_V6_ADDR_MASK or FWP_BYTE_ARRAY16_TYPE

FWPM_CONDITION_PIPE

FWP_BYTE_BLOB_TYPE

FWPM_CONDITION_IP_REMOTE_ADDRESS_V4

FWP_V4_ADDR_MASK or FWP_UINT32

FWPM_CONDITION_IP_REMOTE_ADDRESS_V6

FWP_V6_ADDR_MASK or FWP_BYTE_ARRAY16_TYPE

FWPM_CONDITION_PROCESS_WITH_RPC_IF_UUID

FWP_BYTE_ARRAY16_TYPE

FWPM_CONDITION_RPC_EP_VALUE

FWP_BYTE_BLOB_TYPE

FWPM_CONDITION_RPC_EP_FLAGS

FWP_UINT32

FWPM_CONDITION_CLIENT_TOKEN

FWP_SECURITY_DESCRIPTOR_TYPE

FWPM_CONDITION_RPC_SERVER_NAME

FWP_BYTE_BLOB_TYPE

FWPM_CONDITION_RPC_SERVER_PORT

FWP_UINT16

FWPM_CONDITION_RPC_PROXY_AUTH_TYPE

FWP_BYTE_BLOB_TYPE

FWPM_CONDITION_CLIENT_CERT_KEY_LENGTH

FWP_UINT32

FWPM_CONDITION_CLIENT_CERT_OID

FWP_BYTE_BLOB_TYPE

FWPM_CONDITION_INTERFACE_MAC_ADDRESS

FWP_BYTE_ARRAY6_TYPE

FWPM_CONDITION_LOCAL_MAC_ADDRESS

FWP_BYTE_ARRAY6_TYPE

FWPM_CONDITION_REMOTE_MAC_ADDRESS

FWP_BYTE_ARRAY6_TYPE

FWPM_CONDITION_ETHER_TYPE

FWP_UINT16

FWPM_CONDITION_VLAN_ID

FWP_UINT16

FWPM_CONDITION_NDIS_PORT

FWP_UINT16

FWPM_CONDITION_NDIS_MEDIA_TYPE

FWP_UINT16

FWPM_CONDITION_NDIS_PHYSICAL_MEDIA_TYPE

FWP_UINT16

FWPM_CONDITION_L2_FLAGS

FWP_UINT16

FWPM_CONDITION_LOCAL_MAC_ADDRESS_TYPE

FWP_UINT8

FWPM_CONDITION_REMOTE_MAC_ADDRESS_TYPE

FWP_UINT8

FWPM_CONDITION_INTERFACE

FWP_UINT64

FWPM_CONDITION_PACKAGE_ID

FWP_SID

FWPM_CONDITION_MAC_SOURCE_ADDRESS

FWP_BYTE_ARRAY6_TYPE

FWPM_CONDITION_MAC_DESTINATION_ADDRESS

FWP_BYTE_ARRAY6_TYPE

FWPM_CONDITION_MAC_SOURCE_ADDRESS_TYPE

FWP_UINT8

FWPM_CONDITION_MAC_DESTINATION_ADDRESS_TYPE

FWP_UINT8

FWPM_CONDITION_IP_SOURCE_PORT

FWP_UINT16

FWPM_CONDITION_IP_DESTINATION_PORT

FWP_UINT16

FWPM_CONDITION_VSWITCH_ID

FWP_BYTE_BLOB_TYPE

FWPM_CONDITION_VSWITCH_NETWORK_TYPE

FWP_UINT8

FWPM_CONDITION_VSWITCH_SOURCE_INTERFACE_ID

FWP_BYTE_BLOB_TYPE

FWPM_CONDITION_VSWITCH_DESTINATION_INTERFACE_ID

FWP_BYTE_BLOB_TYPE

FWPM_CONDITION_VSWITCH_SOURCE_INTERFACE_TYPE

FWP_UINT8

FWPM_CONDITION_VSWITCH_DESTINATION_INTERFACE_TYPE

FWP_UINT8

FWPM_CONDITION_VSWITCH_SOURCE_VM_ID

FWP_BYTE_BLOB_TYPE

FWPM_CONDITION_VSWITCH_DESTINATION_VM_ID

FWP_BYTE_BLOB_TYPE

FWPM_CONDITION_VSWITCH_TENANT_NETWORK_ID

FWP_UINT16

FWPM_CONDITION_ALE_PACKAGE_ID

FWP_SID

FWPM_CONDITION_ALE_ORIGINAL_APP_ID

FWP_BYTE_BLOB_TYPE

FWPM_CONDITION_QM_MODE

FWP_UINT32

Send comments about this topic to Microsoft