Filtering condition data types

The data type for the condition value for each filtering condition is specified as an FWP_DATA_TYPE value as follows.

Filtering condition identifier	Condition value data type
FWPM_CONDITION_IP_LOCAL_ADDRESS	For an IPv4 address: FWP_V4_ADDR_MASK or FWP_UINT32 For an IPv6 address: FWP_V6_ADDR_MASK or FWP_BYTE_ARRAY16_TYPE
FWPM_CONDITION_IP_REMOTE_ADDRESS	For an IPv4 address: FWP_V4_ADDR_MASK or FWP_UINT32 For an IPv6 address: FWP_V6_ADDR_MASK or FWP_BYTE_ARRAY16_TYPE
FWPM_CONDITION_IP_SOURCE_ADDRESS	For an IPv4 address: FWP_V4_ADDR_MASK or FWP_UINT32 For an IPv6 address: FWP_V6_ADDR_MASK or FWP_BYTE_ARRAY16_TYPE
FWPM_CONDITION_IP_DESTINATION_ADDRESS	For an IPv4 address: FWP_V4_ADDR_MASK or FWP_UINT32 For an IPv6 address: FWP_V6_ADDR_MASK or FWP_BYTE_ARRAY16_TYPE
FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE	FWP_UINT8
FWPM_CONDITION_IP_DESTINATION_ADDRESS_TYPE	FWP_UINT8
FWPM_CONDITION_IP_LOCAL_INTERFACE	FWP_UINT64
FWPM_CONDITION_IP_FORWARD_INTERFACE	FWP_UINT64
FWPM_CONDITION_IP_PROTOCOL	FWP_UINT8
FWPM_CONDITION_IP_LOCAL_PORT	FWP_UINT16
FWPM_CONDITION_IP_REMOTE_PORT	FWP_UINT16
FWPM_CONDITION_ICMP_TYPE	FWP_UINT16
FWPM_CONDITION_ICMP_CODE	FWP_UINT16
FWPM_CONDITION_EMBEDDED_LOCAL_ADDRESS_TYPE	FWP_UINT8
FWPM_CONDITION_EMBEDDED_REMOTE_ADDRESS	For an IPv4 address: FWP_V4_ADDR_MASK or FWP_UINT32 For an IPv6 address: FWP_V6_ADDR_MASK or FWP_BYTE_ARRAY16_TYPE
FWPM_CONDITION_EMBEDDED_PROTOCOL	FWP_UINT8
FWPM_CONDITION_EMBEDDED_LOCAL_PORT	FWP_UINT16
FWPM_CONDITION_EMBEDDED_REMOTE_PORT	FWP_UINT16
FWPM_CONDITION_FLAGS	FWP_UINT32
FWPM_CONDITION_DIRECTION	FWP_UINT32
FWPM_CONDITION_INTERFACE_INDEX	FWP_UINT32
FWPM_CONDITION_SUB_INTERFACE_INDEX	FWP_UINT32
FWPM_CONDITION_SOURCE_INTERFACE_INDEX	FWP_UINT32
FWPM_CONDITION_SOURCE_SUB_INTERFACE_INDEX	FWP_UINT32
FWPM_CONDITION_DESTINATION_INTERFACE_INDEX	FWP_UINT32
FWPM_CONDITION_DESTINATION_SUB_INTERFACE_INDEX	FWP_UINT32
FWPM_CONDITION_ALE_APP_ID	FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_ALE_USER_ID	FWP_SECURITY_DESCRIPTOR_TYPE
FWPM_CONDITION_ALE_REMOTE_USER_ID	FWP_SECURITY_DESCRIPTOR_TYPE
FWPM_CONDITION_ALE_REMOTE_MACHINE_ID	FWP_SECURITY_DESCRIPTOR_TYPE
FWPM_CONDITION_ALE_PROMISCUOUS_MODE	FWP_UNIT32
FWPM_CONDITION_ALE_SIO_FIREWALL_SYSTEM_PORT	FWP_UINT32
FWPM_CONDITION_ALE_NAP_CONTEXT	FWP_UINT32
FWPM_CONDITION_REMOTE_USER_TOKEN	FWP_SECURITY_DESCRIPTOR_TYPE
FWPM_CONDITION_RPC_IF_UUID	FWP_BYTE_ARRAY16_TYPE
FWPM_CONDITION_RPC_IF_VERSION	FWP_UINT16
FWPM_CONDITION_RPC_IF_FLAG	FWP_UINT32
FWPM_CONDITION_DCOM_APP_ID	FWP_BYTE_ARRAY16_TYPE
FWPM_CONDITION_IMAGE_NAME	FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_RPC_PROTOCOL	FWP_UINT8
FWPM_CONDITION_RPC_AUTH_TYPE	FWP_UINT8
FWPM_CONDITION_RPC_AUTH_LEVEL	FWP_UINT8
FWPM_CONDITION_SEC_ENCRYPT_ALGORITHM	FWP_UINT32
FWPM_CONDITION_SEC_KEY_SIZE	FWP_UINT32
FWPM_CONDITION_IP_LOCAL_ADDRESS_V4	FWP_V4_ADDR_MASK or FWP_UINT32
FWPM_CONDITION_IP_LOCAL_ADDRESS_V6	FWP_V6_ADDR_MASK or FWP_BYTE_ARRAY16_TYPE
FWPM_CONDITION_PIPE	FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_IP_REMOTE_ADDRESS_V4	FWP_V4_ADDR_MASK or FWP_UINT32
FWPM_CONDITION_IP_REMOTE_ADDRESS_V6	FWP_V6_ADDR_MASK or FWP_BYTE_ARRAY16_TYPE
FWPM_CONDITION_PROCESS_WITH_RPC_IF_UUID	FWP_BYTE_ARRAY16_TYPE
FWPM_CONDITION_RPC_EP_VALUE	FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_RPC_EP_FLAGS	FWP_UINT32
FWPM_CONDITION_CLIENT_TOKEN	FWP_SECURITY_DESCRIPTOR_TYPE
FWPM_CONDITION_RPC_SERVER_NAME	FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_RPC_SERVER_PORT	FWP_UINT16
FWPM_CONDITION_RPC_PROXY_AUTH_TYPE	FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_CLIENT_CERT_KEY_LENGTH	FWP_UINT32
FWPM_CONDITION_CLIENT_CERT_OID	FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_INTERFACE_MAC_ADDRESS	FWP_BYTE_ARRAY6_TYPE
FWPM_CONDITION_LOCAL_MAC_ADDRESS	FWP_BYTE_ARRAY6_TYPE
FWPM_CONDITION_REMOTE_MAC_ADDRESS	FWP_BYTE_ARRAY6_TYPE
FWPM_CONDITION_ETHER_TYPE	FWP_UINT16
FWPM_CONDITION_VLAN_ID	FWP_UINT16
FWPM_CONDITION_NDIS_PORT	FWP_UINT16
FWPM_CONDITION_NDIS_MEDIA_TYPE	FWP_UINT16
FWPM_CONDITION_NDIS_PHYSICAL_MEDIA_TYPE	FWP_UINT16
FWPM_CONDITION_L2_FLAGS	FWP_UINT16
FWPM_CONDITION_LOCAL_MAC_ADDRESS_TYPE	FWP_UINT8
FWPM_CONDITION_REMOTE_MAC_ADDRESS_TYPE	FWP_UINT8
FWPM_CONDITION_INTERFACE	FWP_UINT64
FWPM_CONDITION_PACKAGE_ID	FWP_SID
FWPM_CONDITION_MAC_SOURCE_ADDRESS	FWP_BYTE_ARRAY6_TYPE
FWPM_CONDITION_MAC_DESTINATION_ADDRESS	FWP_BYTE_ARRAY6_TYPE
FWPM_CONDITION_MAC_SOURCE_ADDRESS_TYPE	FWP_UINT8
FWPM_CONDITION_MAC_DESTINATION_ADDRESS_TYPE	FWP_UINT8
FWPM_CONDITION_IP_SOURCE_PORT	FWP_UINT16
FWPM_CONDITION_IP_DESTINATION_PORT	FWP_UINT16
FWPM_CONDITION_VSWITCH_ID	FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_VSWITCH_NETWORK_TYPE	FWP_UINT8
FWPM_CONDITION_VSWITCH_SOURCE_INTERFACE_ID	FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_VSWITCH_DESTINATION_INTERFACE_ID	FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_VSWITCH_SOURCE_INTERFACE_TYPE	FWP_UINT8
FWPM_CONDITION_VSWITCH_DESTINATION_INTERFACE_TYPE	FWP_UINT8
FWPM_CONDITION_VSWITCH_SOURCE_VM_ID	FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_VSWITCH_DESTINATION_VM_ID	FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_VSWITCH_TENANT_NETWORK_ID	FWP_UINT16
FWPM_CONDITION_ALE_PACKAGE_ID	FWP_SID
FWPM_CONDITION_ALE_ORIGINAL_APP_ID	FWP_BYTE_BLOB_TYPE
FWPM_CONDITION_QM_MODE	FWP_UINT32