Edit

Filtering conditions available at each filtering layer

  • Article

The Windows Filtering Platform (WFP) filter engine supports a different set of filtering conditions at each of its filtering layers.

The list of filtering conditions that are available at each layer are as follows.

FWPM_LAYER_INBOUND_IPPACKET_V4 / FWPM_LAYER_INBOUND_IPPACKET_V4_DISCARD / FWPM_LAYER_INBOUND_IPPACKET_V6 / FWPM_LAYER_INBOUND_IPPACKET_V6_DISCARD

  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_INTERFACE_INDEX
  • FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_TUNNEL_TYPE

Windows 10 and later

  • FWPM_CONDITION_COMPARTMENT_ID

FWPM_LAYER_OUTBOUND_IPPACKET_V4 / FWPM_LAYER_OUTBOUND_IPPACKET_V4_DISCARD / FWPM_LAYER_OUTBOUND_IPPACKET_V6 / FWPM_LAYER_OUTBOUND_IPPACKET_V6_DISCARD

  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_INTERFACE_INDEX
  • FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_TUNNEL_TYPE

Windows 10 and later

  • FWPM_CONDITION_COMPARTMENT_ID

FWPM_LAYER_IPFORWARD_V4 / FWPM_LAYER_IPFORWARD_V4_DISCARD / FWPM_LAYER_IPFORWARD_V6 / FWPM_LAYER_IPFORWARD_V6_DISCARD

  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_DESTINATION_INTERFACE_INDEX
  • FWPM_CONDITION_DESTINATION_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_IP_DESTINATION_ADDRESS
  • FWPM_CONDITION_IP_DESTINATION_ADDRESS_TYPE
  • FWPM_CONDITION_IP_FORWARD_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_SOURCE_ADDRESS
  • FWPM_CONDITION_SOURCE_INTERFACE_INDEX
  • FWPM_CONDITION_SOURCE_SUB_INTERFACE_INDEX

Windows 7 and later

  • FWPM_CONDITION_IP_PHYSICAL_ARRIVAL_INTERFACE
  • FWPM_CONDITION_IP_PHYSICAL_NEXTHOP_INTERFACE
  • FWPM_CONDITION_ARRIVAL_INTERFACE_PROFILE_ID
  • FWPM_CONDITION_NEXTHOP_INTERFACE_PROFILE_ID

Windows 10 and later

  • FWPM_CONDITION_COMPARTMENT_ID

FWPM_LAYER_INBOUND_TRANSPORT_V4 / FWPM_LAYER_INBOUND_TRANSPORT_V4_DISCARD / FWPM_LAYER_INBOUND_TRANSPORT_V6 / FWPM_LAYER_INBOUND_TRANSPORT_V6_DISCARD

  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_INTERFACE_INDEX
  • FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_PORT
  • FWPM_CONDITION_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_TUNNEL_TYPE

Windows 7 and later

  • FWPM_CONDITION_CURRENT_PROFILE_ID

Windows 10 and later

  • FWPM_CONDITION_IPSEC_SECURITY_REALM_ID
  • FWPM_CONDITION_COMPARTMENT_ID

FWPM_LAYER_OUTBOUND_TRANSPORT_V4 / FWPM_LAYER_OUTBOUND_TRANSPORT_V4_DISCARD / FWPM_LAYER_OUTBOUND_TRANSPORT_V6 / FWPM_LAYER_OUTBOUND_TRANSPORT_V6_DISCARD

  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_INTERFACE_INDEX
  • FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_IP_DESTINATION_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_PORT
  • FWPM_CONDITION_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_TUNNEL_TYPE

Windows 7 and later

  • FWPM_CONDITION_CURRENT_PROFILE_ID

Windows 10 and later

  • FWPM_CONDITION_IPSEC_SECURITY_REALM_ID
  • FWPM_CONDITION_COMPARTMENT_ID

FWPM_LAYER_STREAM_V4 / FWPM_LAYER_STREAM_V4_DISCARD / FWPM_LAYER_STREAM_V6 / FWPM_LAYER_STREAM_V6_DISCARD

  • FWPM_CONDITION_DIRECTION
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_PORT

Windows 10 and later

  • FWPM_CONDITION_COMPARTMENT_ID

FWPM_LAYER_DATAGRAM_DATA_V4 / FWPM_LAYER_DATAGRAM_DATA_V4_DISCARD / FWPM_LAYER_DATAGRAM_DATA_V6 / FWPM_LAYER_DATAGRAM_DATA_V6_DISCARD

  • FWPM_CONDITION_DIRECTION
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_INTERFACE_INDEX
  • FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_PORT
  • FWPM_CONDITION_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_TUNNEL_TYPE

Windows 10 and later

  • FWPM_CONDITION_COMPARTMENT_ID

FWPM_LAYER_STREAM_PACKET V4 / FWPM_LAYER_STREAM_PACKET V6

Windows 7 and later

  • FWPM_CONDITION_DIRECTION
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_INTERFACE_INDEX
  • FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_PORT
  • FWPM_CONDITION_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_TUNNEL_TYPE

Windows 10 and later

  • FWPM_CONDITION_COMPARTMENT_ID

FWPM_LAYER_INBOUND_ICMP_ERROR_V4 / FWPM_LAYER_INBOUND_ICMP_ERROR_V4_DISCARD / FWPM_LAYER_INBOUND_ICMP_ERROR_V6 / FWPM_LAYER_INBOUND_ICMP_ERROR_V6_DISCARD

  • FWPM_CONDITION_ARRIVAL_INTERFACE_INDEX
  • FWPM_CONDITION_ARRIVAL_INTERFACE_TYPE
  • FWPM_CONDITION_ARRIVAL_SUB_INTERFACE_INDEX Windows Vista / Windows 7: FWPM_CONDITION_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_ARRIVAL_TUNNEL_TYPE
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_ICMP_CODE
  • FWPM_CONDITION_ICMP_TYPE
  • FWPM_CONDITION_EMBEDDED_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_EMBEDDED_LOCAL_PORT
  • FWPM_CONDITION_EMBEDDED_PROTOCOL
  • FWPM_CONDITION_EMBEDDED_REMOTE_ADDRESS
  • FWPM_CONDITION_EMBEDDED_REMOTE_PORT
  • FWPM_CONDITION_IP_ARRIVAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_LOCAL_INTERFACE_INDEX Windows Vista / Windows 7: FWPM_CONDITION_INTERFACE_INDEX
  • FWPM_CONDITION_LOCAL_INTERFACE_TYPE Windows Vista / Windows 7: FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_LOCAL_TUNNEL_TYPE Windows Vista / Windows 7: FWPM_CONDITION_TUNNEL_TYPE

Windows 7 and later

  • FWPM_CONDITION_ARRIVAL_INTERFACE_PROFILE_ID
  • FWPM_CONDITION_INTERFACE_QUARANTINE_EPOCH

Windows 10 and later

  • FWPM_CONDITION_COMPARTMENT_ID

FWPM_LAYER_OUTBOUND_ICMP_ERROR_V4 / FWPM_LAYER_OUTBOUND_ICMP_ERROR_V4_DISCARD / FWPM_LAYER_OUTBOUND_ICMP_ERROR_V6 / FWPM_LAYER_OUTBOUND_ICMP_ERROR_V6_DISCARD

  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_ICMP_CODE
  • FWPM_CONDITION_ICMP_TYPE
  • FWPM_CONDITION_INTERFACE_INDEX
  • FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_TUNNEL_TYPE

Windows 7 and later

  • FWPM_CONDITION_NEXTHOP_INTERFACE_PROFILE_ID
  • FWPM_CONDITION_INTERFACE_QUARANTINE_EPOCH

Windows 10 and later

  • FWPM_CONDITION_COMPARTMENT_ID

FWPM_LAYER_ALE_BIND_REDIRECT_V4 / FWPM_LAYER_ALE_BIND_REDIRECT V6

  • FWPM_CONDITION_ALE_PACKAGE_FAMILY_NAME

Windows 7 and later

  • FWPM_CONDITION_ALE_APP_ID
  • FWPM_CONDITION_ALE_USER_ID
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL

Windows 8 and later

  • FWPM_CONDITION_ALE_PACKAGE_ID

Windows 10 and later

  • FWPM_CONDITION_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE
  • FWPM_CONDITION_COMPARTMENT_ID

FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4 / FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4_DISCARD / FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6 / FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6_DISCARD

  • FWPM_CONDITION_ALE_APP_ID
  • FWPM_CONDITION_ALE_PROMISCUOUS_MODE
  • FWPM_CONDITION_ALE_USER_ID
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL
  • FWPM_CONDITION_TUNNEL_TYPE
  • FWPM_CONDITION_ALE_PACKAGE_FAMILY_NAME

Windows 7 and later

  • FWPM_CONDITION_LOCAL_INTERFACE_PROFILE_ID
  • FWPM_CONDITION_ALE_SIO_FIREWALL_SYSTEM_PORT
  • FWPM_CONDITION_ALE_SIO_FIREWALL_SOCKET_PROPERTY

Windows 8 and later

  • FWPM_CONDITION_ALE_PACKAGE_ID

Windows 10 and later

  • FWPM_CONDITION_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE
  • FWPM_CONDITION_COMPARTMENT_ID

FWPM_LAYER_ALE_RESOURCE_RELEASE_V4 / FWPM_LAYER_ALE_RESOURCE_RELEASE_V6

  • FWPM_CONDITION_ALE_PACKAGE_FAMILY_NAME

Windows 7 and later

  • FWPM_CONDITION_ALE_APP_ID
  • FWPM_CONDITION_ALE_USER_ID
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL

Windows 8 and later

  • FWPM_CONDITION_ALE_PACKAGE_ID

Windows 10 and later

  • FWPM_CONDITION_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE
  • FWPM_CONDITION_COMPARTMENT_ID

FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V4 / FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V6

  • FWPM_CONDITION_ALE_PACKAGE_FAMILY_NAME

Windows 7 and later

  • FWPM_CONDITION_ALE_APP_ID
  • FWPM_CONDITION_ALE_USER_ID
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_PORT

Windows 8 and later

  • FWPM_CONDITION_ALE_PACKAGE_ID

Windows 10 and later

  • FWPM_CONDITION_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE
  • FWPM_CONDITION_COMPARTMENT_ID

FWPM_LAYER_ALE_AUTH_LISTEN_V4 / FWPM_LAYER_ALE_AUTH_LISTEN_V4_DISCARD / FWPM_LAYER_ALE_AUTH_LISTEN_V6 / FWPM_LAYER_ALE_AUTH_LISTEN_V6_DISCARD

  • FWPM_CONDITION_ALE_PACKAGE_FAMILY_NAME
  • FWPM_CONDITION_ALE_APP_ID
  • FWPM_CONDITION_ALE_USER_ID
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_TUNNEL_TYPE

Windows 7 and later

  • FWPM_CONDITION_LOCAL_INTERFACE_PROFILE_ID
  • FWPM_CONDITION_ALE_SIO_FIREWALL_SYSTEM_PORT
  • FWPM_CONDITION_ALE_SIO_FIREWALL_SOCKET_PROPERTY

Windows 8 and later

  • FWPM_CONDITION_ALE_PACKAGE_ID

Windows 10 and later

  • FWPM_CONDITION_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE
  • FWPM_CONDITION_COMPARTMENT_ID

FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4 / FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4_DISCARD / FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 / FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6_DISCARD

  • FWPM_CONDITION_ALE_PACKAGE_FAMILY_NAME
  • FWPM_CONDITION_ALE_APP_ID
  • FWPM_CONDITION_ALE_NAP_CONTEXT
  • FWPM_CONDITION_ALE_REMOTE_MACHINE_ID
  • FWPM_CONDITION_ALE_REMOTE_USER_ID
  • FWPM_CONDITION_ALE_SIO_FIREWALL_SYSTEM_PORT
  • FWPM_CONDITION_ALE_USER_ID
  • FWPM_CONDITION_ARRIVAL_INTERFACE_INDEX
  • FWPM_CONDITION_ARRIVAL_INTERFACE_TYPE
  • FWPM_CONDITION_ARRIVAL_SUB_INTERFACE_INDEX Windows Vista / Windows 7: FWPM_CONDITION_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_ARRIVAL_TUNNEL_TYPE
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_IP_ARRIVAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_PORT
  • FWPM_CONDITION_LOCAL_INTERFACE_INDEX Windows Vista / Windows 7: FWPM_CONDITION_INTERFACE_INDEX
  • FWPM_CONDITION_LOCAL_INTERFACE_TYPE Windows Vista / Windows 7: FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_LOCAL_TUNNEL_TYPE Windows Vista / Windows 7: FWPM_CONDITION_TUNNEL_TYPE

Windows 7 and later

  • FWPM_CONDITION_NEXTHOP_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_IP_NEXTHOP_INTERFACE
  • FWPM_CONDITION_NEXTHOP_INTERFACE_TYPE
  • FWPM_CONDITION_NEXTHOP_TUNNEL_TYPE
  • FWPM_CONDITION_NEXTHOP_INTERFACE_INDEX
  • FWPM_CONDITION_ORIGINAL_PROFILE_ID
  • FWPM_CONDITION_CURRENT_PROFILE_ID
  • FWPM_CONDITION_REAUTHORIZE_REASON
  • FWPM_CONDITION_ORIGINAL_ICMP_TYPE
  • FWPM_CONDITION_INTERFACE_QUARANTINE_EPOCH
  • FWPM_CONDITION_ALE_SIO_FIREWALL_SOCKET_PROPERTY
  • FWPM_CONDITION_ALE_REAUTH_REASON

Windows 8 and later

  • FWPM_CONDITION_ALE_PACKAGE_ID

Windows 10 and later

  • FWPM_CONDITION_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE
  • FWPM_CONDITION_COMPARTMENT_ID

FWPM_LAYER_ALE_CONNECT_REDIRECT_V4 / FWPM_LAYER_ALE_CONNECT_REDIRECT V6

  • FWPM_CONDITION_ALE_PACKAGE_FAMILY_NAME

Windows 7 and later

  • FWPM_CONDITION_ALE_APP_ID
  • FWPM_CONDITION_ALE_USER_ID
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL
  • FWPM_CONDITION_IP_REMOTE_PORT
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_IP_DESTINATION_ADDRESS_TYPE

Windows 8 and later

  • FWPM_CONDITION_ALE_PACKAGE_ID
  • FWPM_CONDITION_ALE_ORIGINAL_APP_ID

Windows 10 and later

  • FWPM_CONDITION_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE
  • FWPM_CONDITION_COMPARTMENT_ID

FWPM_LAYER_ALE_AUTH_CONNECT_V4 / FWPM_LAYER_ALE_AUTH_CONNECT_V4_DISCARD / FWPM_LAYER_ALE_AUTH_CONNECT_V6 / FWPM_LAYER_ALE_AUTH_CONNECT_V6_DISCARD

  • FWPM_CONDITION_ALE_EFFECTIVE_NAME
  • FWPM_CONDITION_ALE_PACKAGE_FAMILY_NAME
  • FWPM_CONDITION_ALE_APP_ID
  • FWPM_CONDITION_ALE_REMOTE_MACHINE_ID
  • FWPM_CONDITION_ALE_REMOTE_USER_ID
  • FWPM_CONDITION_ALE_USER_ID
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_IP_DESTINATION_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_PORT
  • FWPM_CONDITION_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_TUNNEL_TYPE
  • FWPM_CONDITION_IP_ARRIVAL_INTERFACE
  • FWPM_CONDITION_ARRIVAL_INTERFACE_TYPE
  • FWPM_CONDITION_ARRIVAL_TUNNEL_TYPE
  • FWPM_CONDITION_ARRIVAL_INTERFACE_INDEX

Windows Vista SP1 and later

  • FWPM_CONDITION_INTERFACE_INDEX

Windows 7 and later

  • FWPM_CONDITION_NEXTHOP_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_IP_NEXTHOP_INTERFACE
  • FWPM_CONDITION_NEXTHOP_INTERFACE_TYPE
  • FWPM_CONDITION_NEXTHOP_TUNNEL_TYPE
  • FWPM_CONDITION_NEXTHOP_INTERFACE_INDEX
  • FWPM_CONDITION_ORIGINAL_PROFILE_ID
  • FWPM_CONDITION_CURRENT_PROFILE_ID
  • FWPM_CONDITION_REAUTHORIZE_REASON
  • FWPM_CONDITION_PEER_NAME
  • FWPM_CONDITION_ORIGINAL_ICMP_TYPE
  • FWPM_CONDITION_INTERFACE_QUARANTINE_EPOCH
  • FWPM_CONDITION_ALE_REAUTH_REASON

Windows 8 and later

  • FWPM_CONDITION_ALE_PACKAGE_ID
  • FWPM_CONDITION_ALE_ORIGINAL_APP_ID

Windows 10 and later

  • FWPM_CONDITION_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE
  • FWPM_CONDITION_COMPARTMENT_ID

FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4 / FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4_DISCARD / FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6 / FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6_DISCARD

  • FWPM_CONDITION_ALE_PACKAGE_FAMILY_NAME
  • FWPM_CONDITION_ALE_APP_ID
  • FWPM_CONDITION_ALE_REMOTE_MACHINE_ID
  • FWPM_CONDITION_ALE_REMOTE_USER_ID
  • FWPM_CONDITION_ALE_USER_ID
  • FWPM_CONDITION_DIRECTION
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_IP_DESTINATION_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_PORT
  • FWPM_CONDITION_TUNNEL_TYPE

Windows 8 and later

  • FWPM_CONDITION_ALE_PACKAGE_ID
  • FWPM_CONDITION_ALE_ORIGINAL_APP_ID

Windows 10 and later

  • FWPM_CONDITION_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE
  • FWPM_CONDITION_COMPARTMENT_ID

FWPM_LAYER_NAME_RESOLUTION_CACHE_V4 / FWPM_LAYER_NAME_RESOLUTION_CACHE_V6

Windows 7 and later

  • FWPM_CONDITION_ALE_USER_ID
  • FWPM_CONDITION_ALE_APP_ID
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_PEER_NAME

FWPM_LAYER_IPSEC_KM_DEMUX_V4 / FWPM_LAYER_IPSEC_KM_DEMUX_V6

  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_ADDRESS

Windows 10 and later

  • FWPM_CONDITION_IPSEC_SECURITY_REALM_ID

FWPM_LAYER_IPSEC_V4 / FWPM_LAYER_IPSEC_V6

  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_PORT

Windows 7 and later

  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_CURRENT_PROFILE_ID

Windows 10 and later

  • FWPM_CONDITION_IPSEC_SECURITY_REALM_ID

FWPM_LAYER_IKEEXT_V4 / FWPM_LAYER_IKEEXT_V6

  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_ADDRESS

Windows 7 and later

  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_CURRENT_PROFILE_ID

Windows 10 and later

  • FWPM_CONDITION_IPSEC_SECURITY_REALM_ID

FWPM_LAYER_RPC_UM

  • FWPM_CONDITION_DCOM_APP_ID
  • FWPM_CONDITION_IMAGE_NAME
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_V4
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_V6
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_REMOTE_ADDRESS_V4
  • FWPM_CONDITION_IP_REMOTE_ADDRESS_V6
  • FWPM_CONDITION_PIPE
  • FWPM_CONDITION_REMOTE_USER_TOKEN
  • FWPM_CONDITION_RPC_AUTH_LEVEL
  • FWPM_CONDITION_RPC_AUTH_TYPE
  • FWPM_CONDITION_RPC_IF_FLAG
  • FWPM_CONDITION_RPC_IF_UUID
  • FWPM_CONDITION_RPC_IF_VERSION
  • FWPM_CONDITION_RPC_PROTOCOL
  • FWPM_CONDITION_SEC_ENCRYPT_ALGORITHM
  • FWPM_CONDITION_SEC_KEY_SIZE

Windows 11 and later

  • FWPM_CONDITION_RPC_OPNUM

FWPM_LAYER_RPC_EPMAP

  • FWPM_CONDITION_IP_LOCAL_ADDRESS_V4

  • FWPM_CONDITION_IP_LOCAL_ADDRESS_V6

  • FWPM_CONDITION_IP_LOCAL_PORT

  • FWPM_CONDITION_IP_REMOTE_ADDRESS_V4

  • FWPM_CONDITION_IP_REMOTE_ADDRESS_V6

  • FWPM_CONDITION_PIPE

  • FWPM_CONDITION_REMOTE_USER_TOKEN

  • FWPM_CONDITION_RPC_AUTH_LEVEL

  • FWPM_CONDITION_RPC_AUTH_TYPE

  • FWPM_CONDITION_RPC_IF_UUID

  • FWPM_CONDITION_RPC_IF_VERSION

  • FWPM_CONDITION_RPC_PROTOCOL

  • FWPM_CONDITION_SEC_ENCRYPT_ALGORITHM

  • FWPM_CONDITION_SEC_KEY_SIZE

FWPM_LAYER_RPC_EP_ADD

  • FWPM_CONDITION_PROCESS_WITH_RPC_IF_UUID
  • FWPM_CONDITION_RPC_EP_FLAGS
  • FWPM_CONDITION_RPC_EP_VALUE
  • FWPM_CONDITION_RPC_PROTOCOL

FWPM_LAYER_RPC_PROXY_CONN

  • FWPM_CONDITION_CLIENT_CERT_KEY_LENGTH
  • FWPM_CONDITION_CLIENT_CERT_OID
  • FWPM_CONDITION_CLIENT_TOKEN
  • FWPM_CONDITION_RPC_PROXY_AUTH_TYPE
  • FWPM_CONDITION_RPC_SERVER_NAME
  • FWPM_CONDITION_RPC_SERVER_PORT

FWPM_LAYER_RPC_PROXY_IF

  • FWPM_CONDITION_CLIENT_CERT_KEY_LENGTH
  • FWPM_CONDITION_CLIENT_CERT_OID
  • FWPM_CONDITION_CLIENT_TOKEN
  • FWPM_CONDITION_RPC_IF_UUID
  • FWPM_CONDITION_RPC_IF_VERSION
  • FWPM_CONDITION_RPC_PROXY_AUTH_TYPE
  • FWPM_CONDITION_RPC_SERVER_NAME
  • FWPM_CONDITION_RPC_SERVER_PORT

FWPM_LAYER_KM_AUTHORIZATION

  • FWPM_CONDITION_KM_AUTH_NAP_CONTEXT

Windows 7 and later

  • FWPM_CONDITION_REMOTE_ID
  • FWPM_CONDITION_AUTHENTICATION_TYPE
  • FWPM_CONDITION_KM_TYPE
  • FWPM_CONDITION_KM_MODE
  • FWPM_CONDITION_DIRECTION
  • FWPM_CONDITION_IPSEC_POLICY_KEY

FWPM_LAYER_INBOUND_MAC_FRAME_ETHERNET / FWPM_LAYER_OUTBOUND_MAC_FRAME_ETHERNET

Windows 8 and later

  • FWPM_CONDITION_INTERFACE_MAC_ADDRESS
  • FWPM_CONDITION_MAC_LOCAL_ADDRESS
  • FWPM_CONDITION_MAC_REMOTE_ADDRESS
  • FWPM_CONDITION_MAC_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_MAC_REMOTE_ADDRESS_TYPE
  • FWPM_CONDITION_ETHER_TYPE
  • FWPM_CONDITION_VLAN_ID
  • FWPM_CONDITION_INTERFACE
  • FWPM_CONDITION_INTERFACE_INDEX
  • FWPM_CONDITION_NDIS_PORT
  • FWPM_CONDITION_L2_FLAGS

Windows 10 and later

  • FWPM_CONDITION_COMPARTMENT_ID

FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE / FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE

Windows 8 and later

  • FWPM_CONDITION_NDIS_MEDIA_TYPE
  • FWPM_CONDITION_NDIS_PHYSICAL_MEDIA_TYPE
  • FWPM_CONDITION_INTERFACE
  • FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_INTERFACE_INDEX
  • FWPM_CONDITION_NDIS_PORT
  • FWPM_CONDITION_L2_FLAGS

Windows 10 and later

  • FWPM_CONDITION_COMPARTMENT_ID

FWPM_LAYER_EGRESS_VSWITCH_ETHERNET / FWPM_LAYER_INGRESS_VSWITCH_ETHERNET

  • FWPM_CONDITION_VSWITCH_DESTINATION_VM_ID

Windows 8 and later

  • FWPM_CONDITION_MAC_SOURCE_ADDRESS
  • FWPM_CONDITION_MAC_SOURCE_ADDRESS_TYPE
  • FWPM_CONDITION_MAC_DESTINATION_ADDRESS
  • FWPM_CONDITION_MAC_DESTINATION_ADDRESS_TYPE
  • FWPM_CONDITION_ETHER_TYPE
  • FWPM_CONDITION_VLAN_ID
  • FWPM_CONDITION_VSWITCH_TENANT_NETWORK_ID
  • FWPM_CONDITION_VSWITCH_ID
  • FWPM_CONDITION_VSWITCH_NETWORK_TYPE
  • FWPM_CONDITION_VSWITCH_SOURCE_INTERFACE_ID
  • FWPM_CONDITION_VSWITCH_SOURCE_INTERFACE_TYPE
  • FWPM_CONDITION_VSWITCH_SOURCE_VM_ID
  • FWPM_CONDITION_VSWITCH_L2_FLAGS

Windows 10 and later

  • FWPM_CONDITION_COMPARTMENT_ID

FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V4 / FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V4 / FWPM_LAYER_EGRESSVSWITCH_TRANSPORT_V6 / FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V6

  • FWPM_CONDITION_VSWITCH_DESTINATION_VM_ID

Windows 8 and later

  • FWPM_CONDITION_IP_SOURCE_ADDRESS
  • FWPM_CONDITION_IP_DESTINATION_ADDRESS
  • FWPM_CONDITION_IP_PROTOCOL
  • FWPM_CONDITION_IP_SOURCE_PORT
  • FWPM_CONDITION_IP_DESTINATION_PORT
  • FWPM_CONDITION_VLAN_ID
  • FWPM_CONDITION_VSWITCH_TENANT_NETWORK_ID
  • FWPM_CONDITION_VSWITCH_ID
  • FWPM_CONDITION_VSWITCH_NETWORK_TYPE
  • FWPM_CONDITION_VSWITCH_SOURCE_INTERFACE_ID
  • FWPM_CONDITION_VSWITCH_SOURCE_INTERFACE_TYPE
  • FWPM_CONDITION_VSWITCH_SOURCE_VM_ID
  • FWPM_CONDITION_VSWITCH_DESTINATION_INTERFACE_ID
  • FWPM_CONDITION_VSWITCH_DESTINATION_INTERFACE_TYPE
  • FWPM_CONDITION_VSWITCH_L2_FLAGS

Windows 10 and later

  • FWPM_CONDITION_COMPARTMENT_ID

FWPM_LAYER_ OUTBOUND_NETWORK_CONNECTION_POLICY_V4 / FWPM_LAYER_ OUTBOUND_NETWORK_CONNECTION_POLICY_V6

  • FWPM_CONDITION_ALE_APP_ID
  • FWPM_CONDITION_ALE_USER_ID
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_IP_DESTINATION_ADDRESS_TYPE
  • FWPM_CONDITION_IP_REMOTE_PORT
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_ALE_ORIGINAL_APP_ID
  • FWPM_CONDITION_ALE_PACKAGE_ID
  • FWPM_CONDITION_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE
  • FWPM_CONDITION_COMPARTMENT_ID

Remarks

The V4 and V6 suffixes at the end of the layer identifiers indicate whether the layer is located in the IPv4 network stack or in the IPv6 network stack.

Requirements

Requirement Value
Minimum supported client
 Windows Vista [desktop apps only]
Minimum supported server
 Windows Server 2008 [desktop apps only]
Header
Fwpmu.h