Windows Filtering Platform

Overview of the Windows Filtering Platform technology.

To develop Windows Filtering Platform, you need these headers:

• fwpmtypes.h
• fwpmu.h
• fwptypes.h
• fwpsu.h
• iketypes.h
• ipsectypes.h
• netiodef.h

For programming guidance for this technology, see:

• Windows Filtering Platform

Enumerations

DL_ADDRESS_TYPE The DL_ADDRESS_TYPE enumeration (netiodef.h) specifies the type of datalink layer address.
DL_ADDRESS_TYPE The DL_ADDRESS_TYPE enumeration (fwpmtypes.h) specifies the type of datalink layer address.
FWP_AF The FWP_AF enumerated type.
FWP_CLASSIFY_OPTION_TYPE The FWP_CLASSIFY_OPTION_TYPE enumerated type is used by callouts and shims during run-time classification.FWP_CLASSIFY_OPTION_TYPE specifies timeout options for unicast, multicast, and loose source mapping states and enables blocking or permission of state creation on outbound multicast and broadcast traffic.
FWP_DATA_TYPE Data types that can be stored in an FWP_VALUE0 or an FWP_CONDITION_VALUE0structure.
FWP_DIRECTION Direction of network traffic.
FWP_ETHER_ENCAP_METHOD Specifies the method of encapsulating Ethernet II and SNAP traffic. Reserved.
FWP_FILTER_ENUM_TYPE Specifies how the filter enum conditions should be interpreted.
FWP_IP_VERSION Specifies the IP version. (FWP_IP_VERSION)
FWP_MATCH_TYPE Different match types allowed in filter conditions.
FWP_NETWORK_CONNECTION_POLICY_SETTING_TYPE TBD
FWP_VSWITCH_NETWORK_TYPE Specifies the network type of a vSwitch.
FWPM_APPC_NETWORK_CAPABILITY_TYPE Specifies the type of app container network capability that is associated with the object or traffic in question.
FWPM_CHANGE_TYPE Used when dispatching change notifications to subscribers.
FWPM_CONNECTION_EVENT_TYPE Specifies the type of connection object change event.
FWPM_ENGINE_OPTION Configurable options for the filter engine.
FWPM_FIELD_TYPE Provides additional information about how the field's data should be interpreted.
FWPM_NET_EVENT_TYPE Type of net event.
FWPM_PROVIDER_CONTEXT_TYPE Types of provider contexts that may be stored in Base Filtering Engine (BFE).
FWPM_SERVICE_STATE Specifies the current state of the filter engine.
FWPM_SYSTEM_PORT_TYPE The FWPM_SYSTEM_PORT_TYPE enumerated type.
FWPM_VSWITCH_EVENT_TYPE Specifies the type of a vSwitch event.
FWPS_BUILTIN_LAYERS Defines constants that specify built-in run-time filtering layer identifiers. Each is represented by a locally unique identifier (LUID), which is 64 bits in size.
FWPS_FIELDS_ALE_AUTH_CONNECT_V4 Specifies the data field identifiers for the FWPS_LAYER_ALE_AUTH_CONNECT_V4 and FWPS_LAYER_ALE_AUTH_CONNECT_V4_DISCARD run-time filtering layers.
FWPS_FIELDS_ALE_AUTH_CONNECT_V6 Specifies the data field identifiers for the FWPS_LAYER_ALE_AUTH_CONNECT_V6 and FWPS_LAYER_ALE_AUTH_CONNECT_V6_DISCARD run-time filtering layers.
FWPS_FIELDS_ALE_AUTH_LISTEN_V4 Specifies the data field identifiers for the FWPS_LAYER_ALE_AUTH_LISTEN_V4 and FWPS_LAYER_ALE_AUTH_LISTEN_V4_DISCARD run-time filtering layers.
FWPS_FIELDS_ALE_AUTH_LISTEN_V6 Specifies the data field identifiers for the FWPS_LAYER_ALE_AUTH_LISTEN_V6 and FWPS_LAYER_ALE_AUTH_LISTEN_V6_DISCARD run-time filtering layers.
FWPS_FIELDS_ALE_AUTH_RECV_ACCEPT_V4 Specifies the data field identifiers for the FWPS_LAYER_ALE_AUTH_RECV_ACCEPT_V4 and FWPS_LAYER_ALE_AUTH_RECV_ACCEPT_V4_DISCARD run-time filtering layers.
FWPS_FIELDS_ALE_AUTH_RECV_ACCEPT_V6 Specifies the data field identifiers for the FWPS_LAYER_ALE_AUTH_RECV_ACCEPT_V6 and FWPS_LAYER_ALE_AUTH_RECV_ACCEPT_V6_DISCARD run-time filtering layers.
FWPS_FIELDS_ALE_BIND_REDIRECT_V4 Specifies the data field identifiers for the FWPS_LAYER_ALE_BIND_REDIRECT_V4 run-time filtering layer.
FWPS_FIELDS_ALE_BIND_REDIRECT_V6 Specifies the data field identifiers for the FWPS_LAYER_ALE_BIND_REDIRECT_V6 run-time filtering layer.
FWPS_FIELDS_ALE_CONNECT_REDIRECT_V4 Specifies the data field identifiers for the FWPS_LAYER_ALE_CONNECT_REDIRECT_V4 run-time filtering layer.
FWPS_FIELDS_ALE_CONNECT_REDIRECT_V6 Specifies the data field identifiers for the FWPS_LAYER_ALE_CONNECT_REDIRECT_V6 run-time filtering layer.
FWPS_FIELDS_ALE_ENDPOINT_CLOSURE_V4 Specifies the data field identifiers for the FWPS_LAYER_ALE_ENDPOINT_CLOSURE_V4 run-time filtering layer.
FWPS_FIELDS_ALE_ENDPOINT_CLOSURE_V6 Specifies the data field identifiers for the FWPS_LAYER_ALE_ENDPOINT_CLOSURE_V6 run-time filtering layer.
FWPS_FIELDS_ALE_FLOW_ESTABLISHED_V4 Specifies the data field identifiers for the FWPS_LAYER_ALE_FLOW_ESTABLISHED_V4 and FWPS_LAYER_ALE_FLOW_ESTABLISHED_V4_DISCARD run-time filtering layers.
FWPS_FIELDS_ALE_FLOW_ESTABLISHED_V6 Specifies the data field identifiers for the FWPS_LAYER_ALE_FLOW_ESTABLISHED_V6 and FWPS_LAYER_ALE_FLOW_ESTABLISHED_V6_DISCARD run-time filtering layers.
FWPS_FIELDS_ALE_RESOURCE_ASSIGNMENT_V4 Specifies the data field identifiers for the FWPS_LAYER_ALE_RESOURCE_ASSIGNMENT_V4 and FWPS_LAYER_ALE_RESOURCE_ASSIGNMENT_V4_DISCARD run-time filtering layers.
FWPS_FIELDS_ALE_RESOURCE_ASSIGNMENT_V6 Specifies the data field identifiers for the FWPS_LAYER_ALE_RESOURCE_ASSIGNMENT_V6 and FWPS_LAYER_ALE_RESOURCE_ASSIGNMENT_V6_DISCARD run-time filtering layers.
FWPS_FIELDS_ALE_RESOURCE_RELEASE_V4 Specifies the data field identifiers for the FWPS_LAYER_ALE_RESOURCE_RELEASE_V4 run-time filtering layer.
FWPS_FIELDS_ALE_RESOURCE_RELEASE_V6 Specifies the data field identifiers for the FWPS_LAYER_ALE_RESOURCE_RELEASE_V6 run-time filtering layer.
FWPS_FIELDS_DATAGRAM_DATA_V4 Specifies the data field identifiers for the FWPS_LAYER_ALE_RESOURCE_ASSIGNMENT_V4 and FWPS_LAYER_ALE_RESOURCE_ASSIGNMENT_V4_DISCARD run-time filtering layers.
FWPS_FIELDS_DATAGRAM_DATA_V6 Specifies the data field identifiers for the FWPS_LAYER_ALE_RESOURCE_ASSIGNMENT_V6 and FWPS_LAYER_ALE_RESOURCE_ASSIGNMENT_V6_DISCARD run-time filtering layers.
FWPS_FIELDS_EGRESS_VSWITCH_ETHERNET Specifies the data field identifiers for the FWPS_LAYER_EGRESS_VSWITCH_ETHERNET run-time filtering layer.
FWPS_FIELDS_EGRESS_VSWITCH_TRANSPORT_V4 Specifies the data field identifiers for the FWPS_LAYER_EGRESS_VSWITCH_TRANSPORT_V4 run-time filtering layer.
FWPS_FIELDS_EGRESS_VSWITCH_TRANSPORT_V6 Specifies the data field identifiers for the FWPS_LAYER_EGRESS_VSWITCH_TRANSPORT_V6 run-time filtering layer.
FWPS_FIELDS_IKEEXT_V4 Specifies the data field identifiers for the FWPS_LAYER_IKEEXT_V4 run-time filtering layer.
FWPS_FIELDS_IKEEXT_V6 Specifies the data field identifiers for the FWPS_LAYER_IKEEXT_V6 run-time filtering layer.
FWPS_FIELDS_INBOUND_ICMP_ERROR_V4 Specifies the data field identifiers for the FWPS_LAYER_INBOUND_ICMP_ERROR_V4 and FWPS_LAYER_INBOUND_ICMP_ERROR_V4_DISCARD run-time filtering layers.
FWPS_FIELDS_INBOUND_ICMP_ERROR_V6 Specifies the data field identifiers for the FWPS_LAYER_INBOUND_ICMP_ERROR_V6 and FWPS_LAYER_INBOUND_ICMP_ERROR_V6_DISCARD run-time filtering layers.
FWPS_FIELDS_INBOUND_IPPACKET_V4 Specifies the data field identifiers for the FWPS_LAYER_INBOUND_IPPACKET_V4 and FWPS_LAYER_INBOUND_IPPACKET_V4_DISCARD run-time filtering layers.
FWPS_FIELDS_INBOUND_IPPACKET_V6 Specifies the data field identifiers for the FWPS_LAYER_INBOUND_IPPACKET_V6 and FWPS_LAYER_INBOUND_IPPACKET_V6_DISCARD run-time filtering layers.
FWPS_FIELDS_INBOUND_MAC_FRAME_ETHERNET Specifies the data field identifiers for the FWPS_LAYER_INBOUND_MAC_FRAME_ETHERNET run-time filtering layer.
FWPS_FIELDS_INBOUND_MAC_FRAME_NATIVE Specifies the data field identifiers for the FWPS_LAYER_INBOUND_MAC_FRAME_ETHERNET run-time filtering layer.
FWPS_FIELDS_INBOUND_MAC_FRAME_NATIVE_FAST TBD
FWPS_FIELDS_INBOUND_RESERVED2 An enum whose values are reserved for internal use.
FWPS_FIELDS_INBOUND_TRANSPORT_FAST TBD
FWPS_FIELDS_INBOUND_TRANSPORT_V4 Specifies the data field identifiers for the FWPS_LAYER_INBOUND_TRANSPORT_V4 and FWPS_LAYER_INBOUND_TRANSPORT_V4_DISCARD run-time filtering layers.
FWPS_FIELDS_INBOUND_TRANSPORT_V6 Specifies the data field identifiers for the FWPS_LAYER_INBOUND_TRANSPORT_V6 and FWPS_LAYER_INBOUND_TRANSPORT_V6_DISCARD run-time filtering layers.
FWPS_FIELDS_INGRESS_VSWITCH_ETHERNET Specifies the data field identifiers for the FWPS_LAYER_INGRESS_VSWITCH_ETHERNET run-time filtering layer.
FWPS_FIELDS_INGRESS_VSWITCH_TRANSPORT_V4 Specifies the data field identifiers for the FWPS_LAYER_INGRESS_VSWITCH_TRANSPORT_V4 run-time filtering layer.
FWPS_FIELDS_INGRESS_VSWITCH_TRANSPORT_V6 Specifies the data field identifiers for the FWPS_LAYER_INGRESS_VSWITCH_TRANSPORT_V6 run-time filtering layer.
FWPS_FIELDS_IPFORWARD_V4 Specifies the data field identifiers for the FWPS_LAYER_IPFORWARD_V4 and FWPS_LAYER_IPFORWARD_V4_DISCARD run-time filtering layers.
FWPS_FIELDS_IPFORWARD_V6 Specifies the data field identifiers for the FWPS_LAYER_IPFORWARD_V6 and FWPS_LAYER_IPFORWARD_V6_DISCARD run-time filtering layers.
FWPS_FIELDS_IPSEC_KM_DEMUX_V4 Specifies the data field identifiers for the FWPS_LAYER_IPSEC_KM_DEMUX_V4 run-time filtering layer.
FWPS_FIELDS_IPSEC_KM_DEMUX_V6 Specifies the data field identifiers for the FWPS_LAYER_IPSEC_KM_DEMUX_V6 run-time filtering layer.
FWPS_FIELDS_IPSEC_V4 Specifies the data field identifiers for the FWPS_LAYER_IPSEC_V4 run-time filtering layer.
FWPS_FIELDS_IPSEC_V6 Specifies the data field identifiers for the FWPS_LAYER_IPSEC_V6 run-time filtering layer.
FWPS_FIELDS_KM_AUTHORIZATION Specifies the data field identifiers for the FWPS_LAYER_KM_AUTHORIZATION run-time filtering layer.
FWPS_FIELDS_NAME_RESOLUTION_CACHE_V4 Specifies the data field identifiers for the FWPS_LAYER_NAME_RESOLUTION_CACHE_V4 run-time filtering layer.
FWPS_FIELDS_NAME_RESOLUTION_CACHE_V6 Specifies the data field identifiers for the FWPS_LAYER_NAME_RESOLUTION_CACHE_V6 run-time filtering layer.
FWPS_FIELDS_OUTBOUND_ICMP_ERROR_V4 Specifies the data field identifiers for the FWPS_LAYER_OUTBOUND_ICMP_ERROR_V4 and FWPS_LAYER_OUTBOUND_ICMP_ERROR_V4_DISCARD run-time filtering layers.
FWPS_FIELDS_OUTBOUND_ICMP_ERROR_V6 Specifies the data field identifiers for the FWPS_LAYER_OUTBOUND_ICMP_ERROR_V6 and FWPS_LAYER_OUTBOUND_ICMP_ERROR_V6_DISCARD run-time filtering layers.
FWPS_FIELDS_OUTBOUND_IPPACKET_V4 Specifies the data field identifiers for the FWPS_LAYER_OUTBOUND_IPPACKET_V4 and FWPS_LAYER_OUTBOUND_IPPACKET_V4_DISCARD run-time filtering layers.
FWPS_FIELDS_OUTBOUND_IPPACKET_V6 Specifies the data field identifiers for the FWPS_LAYER_OUTBOUND_IPPACKET_V6 and FWPS_LAYER_OUTBOUND_IPPACKET_V6_DISCARD run-time filtering layers.
FWPS_FIELDS_OUTBOUND_MAC_FRAME_ETHERNET Specifies the data field identifiers for the FWPS_LAYER_OUTBOUND_MAC_FRAME_ETHERNET run-time filtering layer.
FWPS_FIELDS_OUTBOUND_MAC_FRAME_NATIVE Specifies the data field identifiers for the FWPS_LAYER_OUTBOUND_MAC_FRAME_NATIVE run-time filtering layer.
FWPS_FIELDS_OUTBOUND_MAC_FRAME_NATIVE_FAST TBD
FWPS_FIELDS_OUTBOUND_NETWORK_POLICY_V4 Specifies the data field identifiers for the FWPS_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V4 run-time filtering layer.
FWPS_FIELDS_OUTBOUND_NETWORK_POLICY_V6 Specifies the data field identifiers for the FWPS_LAYER_OUTBOUND_NETWORK_CONNECTION_POLICY_V6 run-time filtering layer.
FWPS_FIELDS_OUTBOUND_TRANSPORT_FAST TBD
FWPS_FIELDS_OUTBOUND_TRANSPORT_V4 Specifies the data field identifiers for the FWPS_LAYER_OUTBOUND_TRANSPORT_V4 and FWPS_LAYER_OUTBOUND_TRANSPORT_V4_DISCARD run-time filtering layers.
FWPS_FIELDS_OUTBOUND_TRANSPORT_V6 Specifies the data field identifiers for the FWPS_LAYER_OUTBOUND_TRANSPORT_V6 and FWPS_LAYER_OUTBOUND_TRANSPORT_V6_DISCARD run-time filtering layers.
FWPS_FIELDS_RPC_EP_ADD Specifies the data field identifiers for the FWPS_LAYER_RPC_EP_ADD run-time filtering layer.
FWPS_FIELDS_RPC_EPMAP Specifies the data field identifiers for the FWPS_LAYER_RPC_EPMAP run-time filtering layer.
FWPS_FIELDS_RPC_PROXY_CONN Specifies the data field identifiers for the FWPS_LAYER_RPC_PROXY_CONN run-time filtering layer.
FWPS_FIELDS_RPC_PROXY_IF_IF Specifies the data field identifiers for the FWPS_LAYER_RPC_PROXY_IF run-time filtering layer.
FWPS_FIELDS_RPC_UM Specifies the data field identifiers for the FWPS_LAYER_RPC_UM run-time filtering layer.
FWPS_FIELDS_STREAM_PACKET_V4 Specifies the data field identifiers for the FWPS_LAYER_STREAM_PACKET_V4 run-time filtering layer.
FWPS_FIELDS_STREAM_PACKET_V6 Specifies the data field identifiers for the FWPS_LAYER_STREAM_PACKET_V6 run-time filtering layer.
FWPS_FIELDS_STREAM_V4 Specifies the data field identifiers for the FWPS_LAYER_STREAM_V4 and FWPS_LAYER_STREAM_V4_DISCARD run-time filtering layers.
FWPS_FIELDS_STREAM_V6 Specifies the data field identifiers for the FWPS_LAYER_STREAM_V6 and FWPS_LAYER_STREAM_V6_DISCARD run-time filtering layers.
IKEEXT_AUTHENTICATION_IMPERSONATION_TYPE Specifies the type of impersonation to perform when Authenticated Internet Protocol (AuthIP) is used for authentication.
IKEEXT_AUTHENTICATION_METHOD_TYPE Specifies the type of authentication method used by Internet Key Exchange (IKE), Authenticated Internet Protocol (AuthIP), or IKEv2.
IKEEXT_CERT_CONFIG_TYPE Indicates a type of certificate configuration.
IKEEXT_CERT_CRITERIA_NAME_TYPE Specifies the type of NAME fields possible for a certificate selection "subject" criteria.
IKEEXT_CIPHER_TYPE Specifies the type of encryption algorithm used for encrypting the Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) messages.
IKEEXT_DH_GROUP Specifies the type of Diffie Hellman group used for Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) key generation.
IKEEXT_EM_SA_STATE States for the Extended Mode (EM) negotiation exchanges that are part of the Authenticated Internet Protocol (AuthIP) protocol.
IKEEXT_INTEGRITY_TYPE Specifies the type of hash algorithm used for integrity protection of Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) messages.
IKEEXT_KEY_MODULE_TYPE Specifies the type of keying module.
IKEEXT_MM_SA_STATE States for the Main Mode (MM) negotiation exchanges that are part of the Authenticated Internet Protocol (AuthIP) and Internet Key Exchange (IKE) protocols.
IKEEXT_QM_SA_STATE States for the Quick Mode (QM) negotiation exchanges that are part of the Authenticated Internet Protocol (AuthIP) and Internet Key Exchange (IKE) protocols.
IKEEXT_SA_ROLE Security association (SA) role for Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) Main Mode or Quick Mode negotiations.
INET_DISCARD_REASON Defines the possible reasons that data is discarded by one of the transport layers.
IP_DISCARD_REASON Defines the possible reasons that data is discarded by one of the network layers.
IPSEC_AUTH_TYPE Indicates the type of hash algorithm used in an IPsec SA for data origin authentication and integrity protection.
IPSEC_CIPHER_TYPE Indicates the type of encryption algorithm used in an IPsec SA for data privacy.
IPSEC_FAILURE_POINT At what point IPsec has failed.
IPSEC_PFS_GROUP Specifies the Diffie Hellman algorithm that should be used for Quick Mode PFS (Perfect Forward Secrecy).
IPSEC_SA_CONTEXT_EVENT_TYPE0 Specifies the type of IPsec security association (SA) context change event.
IPSEC_TOKEN_MODE Different IPsec modes in which a token can be obtained.
IPSEC_TOKEN_PRINCIPAL An access token principal.
IPSEC_TOKEN_TYPE An IPsec token type.
IPSEC_TRAFFIC_TYPE Specifies the type of IPsec traffic being described.
IPSEC_TRANSFORM_TYPE Indicates the type of an IPsec security association (SA) transform.

Functions

FWPM_CALLOUT_CHANGE_CALLBACK0 Is used to add custom behavior to the callout change notification process.
FWPM_CONNECTION_CALLBACK0 Is used to add custom behavior to the connection object subscription process.
FWPM_DYNAMIC_KEYWORD_CALLBACK0 A callback function, which you implement, that is invoked with notifications regarding changes to dynamic keyword address (FW_DYNAMIC_KEYWORD_ADDRESS0) objects.
FWPM_FILTER_CHANGE_CALLBACK0 Is used to add custom behavior to the filter change notification process.
FWPM_NET_EVENT_CALLBACK0 Is used to add custom behavior to the net event subscription process. (FWPM_NET_EVENT_CALLBACK0)
FWPM_NET_EVENT_CALLBACK1 Is used to add custom behavior to the net event subscription process. (FWPM_NET_EVENT_CALLBACK1)
FWPM_NET_EVENT_CALLBACK2 Is used to add custom behavior to the net event subscription process. (FWPM_NET_EVENT_CALLBACK2)
FWPM_NET_EVENT_CALLBACK3 A callback function for adding custom behavior to the net event subscription process.
FWPM_NET_EVENT_CALLBACK4 A callback function for adding custom behavior to the net event subscription process.
FWPM_PROVIDER_CHANGE_CALLBACK0 To add custom behavior to the provider change notification process.
FWPM_PROVIDER_CONTEXT_CHANGE_CALLBACK0 Is used to add custom behavior to the provider context change notification process.
FWPM_SUBLAYER_CHANGE_CALLBACK0 Is used to added custom behavior to the sublayer change notification process.
FWPM_SYSTEM_PORTS_CALLBACK0 Is used to add custom behavior to the system port subscription process.
FWPM_VSWITCH_EVENT_CALLBACK0 Is used to add custom behavior to the vSwitch event subscription process.
FwpmCalloutAdd0 Adds a new callout object to the system.
FwpmCalloutCreateEnumHandle0 Creates a handle used to enumerate a set of callout objects.
FwpmCalloutDeleteById0 Removes a callout object from the system. (FwpmCalloutDeleteById0)
FwpmCalloutDeleteByKey0 Removes a callout object from the system. (FwpmCalloutDeleteByKey0)
FwpmCalloutDestroyEnumHandle0 Frees a handle returned by FwpmCalloutCreateEnumHandle0.
FwpmCalloutEnum0 Returns the next page of results from the callout enumerator.
FwpmCalloutGetById0 Retrieves a callout object. (FwpmCalloutGetById0)
FwpmCalloutGetByKey0 Retrieves a callout object. (FwpmCalloutGetByKey0)
FwpmCalloutGetSecurityInfoByKey0 Retrieves a copy of the security descriptor for a callout object.
FwpmCalloutSetSecurityInfoByKey0 Sets specified security information in the security descriptor of a callout object.
FwpmCalloutSubscribeChanges0 Is used to request the delivery of notifications regarding changes in a particular callout.
FwpmCalloutSubscriptionsGet0 Retrieves an array of all the current callout change notification subscriptions.
FwpmCalloutUnsubscribeChanges0 Is used to cancel a callout change subscription and stop receiving change notifications.
FwpmConnectionCreateEnumHandle0 Creates a handle used to enumerate a set of connection objects.
FwpmConnectionDestroyEnumHandle0 Frees a handle returned by FwpmConnectionCreateEnumHandle0.
FwpmConnectionEnum0 Returns the next page of results from the connection object enumerator.
FwpmConnectionGetById0 Retrieves a connection object.
FwpmConnectionGetSecurityInfo0 Retrieves a copy of the security descriptor for a connection object change event.
FwpmConnectionPolicyAdd0 Allows you to configure expressive routing policies for outbound connections.
FwpmConnectionPolicyDeleteByKey0 Removes the Connection Policy that was created with the GUID specified in the FWPM_PROVIDER_CONTEXT::providerContextKey when you called FwpmConnectionPolicyAdd0.
FwpmConnectionSetSecurityInfo0 Sets specified security information in the security descriptor for a connection object change event.
FwpmConnectionSubscribe0 Is used to request the delivery of notifications about changes to a connection object.
FwpmConnectionSubscriptionsGet0 Retrieves an array of all the current connection object change notification subscriptions.
FwpmConnectionUnsubscribe0 Is used to cancel a connection object change event subscription and stop receiving notifications.
FwpmDynamicKeywordSubscribe0 Requests the delivery of notifications regarding changes to particular dynamic keyword address (FW_DYNAMIC_KEYWORD_ADDRESS0) objects.
FwpmDynamicKeywordUnsubscribe0 Cancels the delivery of notifications regarding changes to particular dynamic keyword address (FW_DYNAMIC_KEYWORD_ADDRESS0) objects.
FwpmEngineClose0 Closes a session to a filter engine.
FwpmEngineGetOption0 Retrieves a filter engine option.
FwpmEngineGetSecurityInfo0 Retrieves a copy of the security descriptor for the filter engine.
FwpmEngineOpen0 Opens a session to the filter engine.
FwpmEngineSetOption0 Changes the filter engine settings.
FwpmEngineSetSecurityInfo0 Sets specified security information in the security descriptor of the filter engine.
FwpmFilterAdd0 Adds a new filter object to the system.
FwpmFilterCreateEnumHandle0 Creates a handle used to enumerate a set of filter objects.
FwpmFilterDeleteById0 Removes a filter object from the system. (FwpmFilterDeleteById0)
FwpmFilterDeleteByKey0 Removes a filter object from the system. (FwpmFilterDeleteByKey0)
FwpmFilterDestroyEnumHandle0 Frees a handle returned by FwpmFilterCreateEnumHandle0. (FwpmFilterDestroyEnumHandle0)
FwpmFilterEnum0 Returns the next page of results from the filter enumerator.
FwpmFilterGetById0 Retrieves a filter object. (FwpmFilterGetById0)
FwpmFilterGetByKey0 Retrieves a filter object. (FwpmFilterGetByKey0)
FwpmFilterGetSecurityInfoByKey0 Retrieves a copy of the security descriptor for a filter object.
FwpmFilterSetSecurityInfoByKey0 Sets specified security information in the security descriptor of a filter object.
FwpmFilterSubscribeChanges0 Is used to request the delivery of notifications regarding changes in a particular filter.
FwpmFilterSubscriptionsGet0 Retrieves an array of all the current filter change notification subscriptions.
FwpmFilterUnsubscribeChanges0 Is used to cancel a filter change subscription and stop receiving change notifications.
FwpmFreeMemory0 Is used to release memory resources allocated by the Windows Filtering Platform (WFP) functions.
FwpmGetAppIdFromFileName0 Retrieves an application identifier from a file name.
FwpmIPsecTunnelAdd0 Adds a new Internet Protocol Security (IPsec) tunnel mode policy to the system. (FwpmIpsecTunnelAdd0)
FwpmIPsecTunnelAdd1 Adds a new Internet Protocol Security (IPsec) tunnel mode policy to the system. (FwpmIpsecTunnelAdd1)
FwpmIPsecTunnelAdd2 Adds a new Internet Protocol Security (IPsec) tunnel mode policy to the system. (FwpmIPsecTunnelAdd2)
FwpmIPsecTunnelAdd3 Adds a new Internet Protocol Security (IPsec) tunnel mode policy to the system.
FwpmIPsecTunnelDeleteByKey0 Removes an Internet Protocol Security (IPsec) tunnel mode policy from the system.
FwpmLayerCreateEnumHandle0 Creates a handle used to enumerate a set of layer objects.
FwpmLayerDestroyEnumHandle0 Frees a handle returned by FwpmFilterCreateEnumHandle0. (FwpmLayerDestroyEnumHandle0)
FwpmLayerEnum0 Returns the next page of results from the layer enumerator.
FwpmLayerGetById0 Retrieves a layer object. (FwpmLayerGetById0)
FwpmLayerGetByKey0 Retrieves a layer object. (FwpmLayerGetByKey0)
FwpmLayerGetSecurityInfoByKey0 Retrieves a copy of the security descriptor for a layer object.
FwpmLayerSetSecurityInfoByKey0 Sets specified security information in the security descriptor of a layer object.
FwpmNetEventCreateEnumHandle0 Creates a handle used to enumerate a set of network events.
FwpmNetEventDestroyEnumHandle0 Frees a handle returned by FwpmNetEventCreateEnumHandle0.
FwpmNetEventEnum0 Returns the next page of results from the network event enumerator. (FwpmNetEventEnum0)
FwpmNetEventEnum1 Returns the next page of results from the network event enumerator. (FwpmNetEventEnum1)
FwpmNetEventEnum2 Returns the next page of results from the network event enumerator. (FwpmNetEventEnum2)
FwpmNetEventEnum3 Returns the next page of results from the network event enumerator. (FwpmNetEventEnum3)
FwpmNetEventEnum4 Retrieves the next page of results from the network event enumerator.
FwpmNetEventEnum5 Retrieves the next page of results from the network event enumerator.
FwpmNetEventsGetSecurityInfo0 The FwpmNetEventsGetSecurityInfo0 function retrieves a copy of the security descriptor for a network event object.
FwpmNetEventsSetSecurityInfo0 Sets specified security information in the security descriptor of a network event object.
FwpmNetEventSubscribe0 Is used to request the delivery of notifications regarding a particular net event. (FwpmNetEventSubscribe0)
FwpmNetEventSubscribe1 Is used to request the delivery of notifications regarding a particular net event. (FwpmNetEventSubscribe1)
FwpmNetEventSubscribe2 Is used to request the delivery of notifications regarding a particular net event. (FwpmNetEventSubscribe2)
FwpmNetEventSubscribe3 Used to request the delivery of notifications regarding a particular net event.
FwpmNetEventSubscribe4 Used to request the delivery of notifications regarding a particular net event.
FwpmNetEventSubscriptionsGet0 Retrieves an array of all the current net event notification subscriptions.
FwpmNetEventUnsubscribe0 Is used to cancel a net event subscription and stop receiving notifications.
FwpmProviderAdd0 Adds a new provider to the system.
FwpmProviderContextAdd0 Adds a new provider context to the system. (FwpmProviderContextAdd0)
FwpmProviderContextAdd1 Adds a new provider context to the system. (FwpmProviderContextAdd1)
FwpmProviderContextAdd2 Adds a new provider context to the system. (FwpmProviderContextAdd2)
FwpmProviderContextAdd3 Adds a new provider context to the system.
FwpmProviderContextCreateEnumHandle0 Creates a handle used to enumerate a set of provider contexts.
FwpmProviderContextDeleteById0 Removes a provider context from the system .
FwpmProviderContextDeleteByKey0 Removes a provider context from the system.
FwpmProviderContextDestroyEnumHandle0 Frees a handle returned by FwpmProviderContextCreateEnumHandle0.
FwpmProviderContextEnum0 Returns the next page of results from the provider context enumerator. (FwpmProviderContextEnum0)
FwpmProviderContextEnum1 Returns the next page of results from the provider context enumerator. (FwpmProviderContextEnum1)
FwpmProviderContextEnum2 Returns the next page of results from the provider context enumerator. (FwpmProviderContextEnum2)
FwpmProviderContextEnum3 Returns the next page of results from the provider context enumerator.
FwpmProviderContextGetById0 Retrieves a provider context. (FwpmProviderContextGetById0)
FwpmProviderContextGetById1 Retrieves a provider context. (FwpmProviderContextGetById1)
FwpmProviderContextGetById2 Retrieves a provider context. (FwpmProviderContextGetById2)
FwpmProviderContextGetById3 Retrieves a provider context.
FwpmProviderContextGetByKey0 Retrieves a provider context. (FwpmProviderContextGetByKey0)
FwpmProviderContextGetByKey1 Retrieves a provider context. (FwpmProviderContextGetByKey1)
FwpmProviderContextGetByKey2 Retrieves a provider context. (FwpmProviderContextGetByKey2)
FwpmProviderContextGetByKey3 Retrieves a provider context.
FwpmProviderContextGetSecurityInfoByKey0 Retrieves a copy of the security descriptor for a provider context object.
FwpmProviderContextSetSecurityInfoByKey0 Sets specified security information in the security descriptor of a provider context object.
FwpmProviderContextSubscribeChanges0 Is used to request the delivery of notifications regarding changes in a particular provider context.
FwpmProviderContextSubscriptionsGet0 Retrieves an array of all the current provider context change notification subscriptions.
FwpmProviderContextUnsubscribeChanges0 Is used to cancel a provider context change subscription and stop receiving change notifications.
FwpmProviderCreateEnumHandle0 Creates a handle used to enumerate a set of providers.
FwpmProviderDeleteByKey0 Removes a provider from the system.
FwpmProviderDestroyEnumHandle0 Frees a handle returned by FwpmProviderCreateEnumHandle0.
FwpmProviderEnum0 Returns the next page of results from the provider enumerator.
FwpmProviderGetByKey0 Retrieves a provider.
FwpmProviderGetSecurityInfoByKey0 Retrieves a copy of the security descriptor for a provider object.
FwpmProviderSetSecurityInfoByKey0 Sets specified security information in the security descriptor of a provider object.
FwpmProviderSubscribeChanges0 Is used to request the delivery of notifications regarding changes in a particular provider.
FwpmProviderSubscriptionsGet0 Retrieves an array of all the current provider change notification subscriptions.
FwpmProviderUnsubscribeChanges0 Is used to cancel a provider change subscription and stop receiving change notifications.
FwpmSessionCreateEnumHandle0 Creates a handle used to enumerate a set of session objects.
FwpmSessionDestroyEnumHandle0 Frees a handle returned by FwpmSessionCreateEnumHandle0.
FwpmSessionEnum0 Returns the next page of results from the session enumerator.
FwpmSubLayerAdd0 Adds a new sublayer to the system.
FwpmSubLayerCreateEnumHandle0 Creates a handle used to enumerate a set of sublayers.
FwpmSubLayerDeleteByKey0 Deletes a sublayer from the system by its key.
FwpmSubLayerDestroyEnumHandle0 Frees a handle returned by FwpmSubLayerCreateEnumHandle0.
FwpmSubLayerEnum0 Returns the next page of results from the sublayer enumerator.
FwpmSubLayerGetByKey0 Retrieves a sublayer by its key.
FwpmSubLayerGetSecurityInfoByKey0 Retrieves a copy of the security descriptor for a sublayer.
FwpmSubLayerSetSecurityInfoByKey0 Sets specified security information in the security descriptor of a sublayer.
FwpmSubLayerSubscribeChanges0 Is used to request the delivery of notifications regarding changes in a particular sublayer.
FwpmSubLayerSubscriptionsGet0 Retrieves an array of all the current sub-layer change notification subscriptions.
FwpmSubLayerUnsubscribeChanges0 Is used to cancel a sublayer change subscription and stop receiving change notifications.
FwpmSystemPortsGet0 Retrieves an array of all of the system port types.
FwpmSystemPortsSubscribe0 Is used to request the delivery of notifications regarding a particular system port.
FwpmSystemPortsUnsubscribe0 Is used to cancel a system port subscription and stop receiving notifications.
FwpmTransactionAbort0 Causes the current transaction within the current session to abort and rollback.
FwpmTransactionBegin0 Begins an explicit transaction within the current session.
FwpmTransactionCommit0 Commits the current transaction within the current session.
FwpmvSwitchEventsGetSecurityInfo0 Retrieves a copy of the security descriptor for a vSwitch event.
FwpmvSwitchEventsSetSecurityInfo0 Sets specified security information in the security descriptor for a vSwitch event.
FwpmvSwitchEventSubscribe0 Is used to request the delivery of notifications regarding a particular vSwitch event.
FwpmvSwitchEventUnsubscribe0 Is used to cancel a vSwitch event subscription and stop receiving notifications.
FWPS_CALLOUT_BOOTTIME_CALLOUT_DELETE_NOTIFY_FN0 TBD
FWPS_CALLOUT_CLASSIFY_FN0 The filter engine calls a callout's classifyFn0 callout function whenever there is data to be processed by the callout.
FWPS_CALLOUT_CLASSIFY_FN1 The filter engine calls a callout's classifyFn1 callout function whenever there is data to be processed by the callout.
FWPS_CALLOUT_CLASSIFY_FN2 The filter engine calls a callout's classifyFn2 callout function whenever there is data to be processed by the callout.
FWPS_CALLOUT_CLASSIFY_FN3 TBD
FWPS_CALLOUT_FLOW_DELETE_NOTIFY_FN0 The filter engine calls a callout's flowDeleteFn callout function to notify the callout that a data flow that is being processed by the callout is being terminated.
FWPS_CALLOUT_NOTIFY_FN0 The filter engine calls a callout's notifyFn0 callout function to notify the callout driver about events that are associated with the callout.
FWPS_CALLOUT_NOTIFY_FN1 The filter engine calls a callout's notifyFn1 callout function to notify the callout driver about events that are associated with the callout.
FWPS_CALLOUT_NOTIFY_FN2 The filter engine calls a callout's notifyFn2 callout function to notify the callout driver about events that are associated with the callout.
FWPS_CALLOUT_NOTIFY_FN3 TBD
FWPS_IS_L2_METADATA_FIELD_PRESENT TBD
FWPS_IS_METADATA_FIELD_PRESENT TBD
FwpsAleEndpointCreateEnumHandle0 Creates a handle that can be used with other application layer enforcement (ALE) endpoint functions to enumerate endpoint data.
FwpsAleEndpointDestroyEnumHandle0 Destroys an endpoint enumeration handle that was created by calling FwpsAleEndpointCreateEnumHandle0.
FwpsAleEndpointEnum0 Enumerates application layer enforcement (ALE) endpoints.
FwpsAleEndpointGetById0 Retrieves information about an application layer enforcement (ALE) endpoint.
FwpsAleEndpointGetSecurityInfo0 Retrieves security information about the application layer enforcement (ALE) endpoint enumeration session.
FwpsAleEndpointSetSecurityInfo0 Sets security information about the application layer enforcement (ALE) endpoint enumeration session.
FwpsOpenToken0 Opens an access token.
IkeextGetStatistics0 Retrieves Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) statistics. (IkeextGetStatistics0)
IkeextGetStatistics1 Retrieves Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) statistics. (IkeextGetStatistics1)
IkeextSaCreateEnumHandle0 Creates a handle used to enumerate a set of Internet Key Exchange (IKE) and Authenticated Internet Protocol (AuthIP) security association (SA) objects.
IkeextSaDbGetSecurityInfo0 The IkeextSaDbGetSecurityInfo0 function retrieves a copy of the security descriptor for a security association (SA) database.
IkeextSaDbSetSecurityInfo0 The IkeextSaDbSetSecurityInfo0 function sets specified security information in the security descriptor of the IKE/AuthIP security association database.
IkeextSaDeleteById0 The IkeextSaDeleteById0 function removes a security association (SA) from the database.
IkeextSaDestroyEnumHandle0 Frees a handle returned by IkeextSaCreateEnumHandle0.
IkeextSaEnum0 Returns the next page of results from the IKE/AuthIP security association (SA) enumerator. (IkeextSaEnum0)
IkeextSaEnum1 Returns the next page of results from the IKE/AuthIP security association (SA) enumerator. (IkeextSaEnum1)
IkeextSaEnum2 Returns the next page of results from the IKE/AuthIP security association (SA) enumerator. (IkeextSaEnum2)
IkeextSaGetById0 Retrieves an IKE/AuthIP security association (SA) from the database. (IkeextSaGetById0)
IkeextSaGetById1 Retrieves an IKE/AuthIP security association (SA) from the database. (IkeextSaGetById1)
IkeextSaGetById2 Retrieves an IKE/AuthIP security association (SA) from the database. (IkeextSaGetById2)
IPSEC_KEY_MANAGER_DICTATE_KEY0 Used by the Trusted Intermediary Agent (TIA) to dictate keys for the SA being negotiated.
IPSEC_KEY_MANAGER_KEY_DICTATION_CHECK0 Indicates whether the Trusted Intermediary Agent (TIA) will dictate the keys for the SA being negotiated.
IPSEC_KEY_MANAGER_NOTIFY_KEY0 Is used to notify Trusted Intermediary Agents (TIAs) of the keys for the SA being negotiated.
IPSEC_SA_CONTEXT_CALLBACK0 Is used to add custom behavior to the IPsec security association (SA) context subscription process.
IPsecDospGetSecurityInfo0 Retrieves a copy of the security descriptor for the IPsec DoS Protection database.
IPsecDospGetStatistics0 The IPsecDospGetStatistics0 function retrieves Internet Protocol Security (IPsec) DoS Protection statistics.
IPsecDospSetSecurityInfo0 The IPsecDospSetSecurityInfo0 function sets specified security information in the security descriptor of the IPsec DoS Protection database.
IPsecDospStateCreateEnumHandle0 Creates a handle used to enumerate a set of IPsec DoS Protection objects.
IPsecDospStateDestroyEnumHandle0 Frees a handle returned by IPsecDospStateCreateEnumHandle0.
IPsecDospStateEnum0 Returns the next page of results from the IPsec DoS Protection state enumerator. Each IPsec DoS Protection state entry corresponds to a flow that has successfully passed the IPsec DoS Protection authentication checks.
IPsecGetStatistics0 Retrieves Internet Protocol Security (IPsec) statistics. (IPsecGetStatistics0)
IPsecGetStatistics1 Retrieves Internet Protocol Security (IPsec) statistics. (IPsecGetStatistics1)
IPsecKeyManagerAddAndRegister0 Registers a Trusted Intermediary Agent (TIA) with IPsec.
IPsecKeyManagerGetSecurityInfoByKey0 Retrieves a copy of the security descriptor that controls access to the key manager.
IPsecKeyManagerSetSecurityInfoByKey0 Sets specified security information in the security descriptor that controls access to the key manager.
IPsecKeyManagersGet0 Returns a list of current Trusted Intermediary Agents (TIAs).
IPsecKeyManagerUnregisterAndDelete0 Unregisters a Trusted Intermediary Agent (TIA) which had previously been registered with IPsec.
IPsecSaContextAddInbound0 The IPsecSaContextAddInbound0 function adds an inbound IPsec security association (SA) bundle to an existing SA context.Note  IPsecSaContextAddInbound0 is the specific implementation of IPsecSaContextAddInbound used in Windows Vista.
IPsecSaContextAddInbound1 The IPsecSaContextAddInbound1 function adds an inbound IPsec security association (SA) bundle to an existing SA context.Note  IPsecSaContextAddInbound1 is the specific implementation of IPsecSaContextAddInbound used in Windows 7 and later.
IPsecSaContextAddOutbound0 The IPsecSaContextAddOutbound0 function adds an outbound IPsec security association (SA) bundle to an existing SA context.Note  IPsecSaContextAddOutbound0 is the specific implementation of IPsecSaContextAddOutbound used in Windows Vista.
IPsecSaContextAddOutbound1 The IPsecSaContextAddOutbound1 function adds an outbound IPsec security association (SA) bundle to an existing SA context.Note  IPsecSaContextAddOutbound1 is the specific implementation of IPsecSaContextAddOutbound used in Windows 7 and later.
IPsecSaContextCreate0 Creates an IPsec security association (SA) context. (IPsecSaContextCreate0)
IPsecSaContextCreate1 Creates an IPsec security association (SA) context. (IPsecSaContextCreate1)
IPsecSaContextCreateEnumHandle0 Creates a handle used to enumerate a set of IPsec security association (SA) context objects.
IPsecSaContextDeleteById0 Deletes an IPsec security association (SA) context.
IPsecSaContextDestroyEnumHandle0 Frees a handle returned by IPsecSaContextCreateEnumHandle0.
IPsecSaContextEnum0 Returns the next page of results from the IPsec security association (SA) context enumerator. (IPsecSaContextEnum0)
IPsecSaContextEnum1 Returns the next page of results from the IPsec security association (SA) context enumerator. (IPsecSaContextEnum1)
IPsecSaContextExpire0 Indicates that an IPsec security association (SA) context should be expired.
IPsecSaContextGetById0 Retrieves an IPsec security association (SA) context. (IPsecSaContextGetById0)
IPsecSaContextGetById1 Retrieves an IPsec security association (SA) context. (IPsecSaContextGetById1)
IPsecSaContextGetSpi0 Retrieves the security parameters index (SPI) for a security association (SA) context. (IPsecSaContextGetSpi0)
IPsecSaContextGetSpi1 Retrieves the security parameters index (SPI) for a security association (SA) context. (IPsecSaContextGetSpi1)
IPsecSaContextSetSpi0 Sets the security parameters index (SPI) for a security association (SA) context.
IPsecSaContextSubscribe0 Is used to request the delivery of notifications regarding a particular IPsec security association (SA) context.
IPsecSaContextSubscriptionsGet0 Retrieves an array of all the current IPsec security association (SA) change notification subscriptions.
IPsecSaContextUnsubscribe0 Is used to cancel an IPsec security association (SA) change subscription and stop receiving change notifications.
IPsecSaContextUpdate0 Updates an IPsec security association (SA) context.
IPsecSaCreateEnumHandle0 Creates a handle used to enumerate a set of Internet Protocol Security (IPsec) security association (SA) objects.
IPsecSaDbGetSecurityInfo0 Retrieves a copy of the security descriptor for the IPsec security association (SA) database.
IPsecSaDbSetSecurityInfo0 Sets specified security information in the security descriptor of the IPsec security association database.
IPsecSaDestroyEnumHandle0 Frees a handle returned by IPsecSaCreateEnumHandle0.
IPsecSaEnum0 Returns the next page of results from the IPsec security association (SA) enumerator. (IPsecSaEnum0)
IPsecSaEnum1 Returns the next page of results from the IPsec security association (SA) enumerator. (IPsecSaEnum1)

Structures

FWP_BYTE_ARRAY16 Stores an array of exactly 16 bytes.
FWP_BYTE_ARRAY6 Stores an array of exactly 6 bytes. Reserved.
FWP_BYTE_BLOB Stores an array containing a variable number of bytes.
FWP_CONDITION_VALUE0 Contains values that are used in filter conditions when testing for matching filters.
FWP_RANGE0 Specifies a range of values.
FWP_TOKEN_INFORMATION The FWP_TOKEN_INFORMATION structure defines a set of security identifiers that are used for user-mode classification.
FWP_V4_ADDR_AND_MASK Specifies IPv4 address and mask in host order.
FWP_V6_ADDR_AND_MASK Specifies an IPv6 address and mask.
FWP_VALUE0 Defines a data value that can be one of a number of different data types.
FWPM_ACTION0 Specifies the action taken if all the filter conditions are true.
FWPM_CALLOUT_CHANGE0 Specifies a change notification dispatched to subscribers.
FWPM_CALLOUT_ENUM_TEMPLATE0 Used for limiting callout enumerations.
FWPM_CALLOUT_SUBSCRIPTION0 Used to subscribe for change notifications. (FWPM_CALLOUT_SUBSCRIPTION0)
FWPM_CALLOUT0 Stores the state associated with a callout.
FWPM_CLASSIFY_OPTION0 The FWPM_CLASSIFY_OPTION0 structure.
FWPM_CLASSIFY_OPTIONS0 The FWPM_CLASSIFY_OPTIONS0 structure is used to store FWPM_CLASSIFY_OPTION0 structures.
FWPM_CONNECTION_ENUM_TEMPLATE0 Used for limiting connection object enumerations.
FWPM_CONNECTION_SUBSCRIPTION0 Stores information used to subscribe to notifications about a connection object.
FWPM_CONNECTION0 Stores the state associated with a connection object.
FWPM_DISPLAY_DATA0 Stores an optional friendly name and an optional description for an object.
FWPM_FIELD0 Specifies schema information for a field.
FWPM_FILTER_CHANGE0 Stores change notification dispatched to subscribers.
FWPM_FILTER_CONDITION0 Expresses a filter condition that must be true for the action to be taken.
FWPM_FILTER_ENUM_TEMPLATE0 Is used for enumerating filters.
FWPM_FILTER_SUBSCRIPTION0 Is used to subscribe for change notifications.
FWPM_FILTER0 Stores the state associated with a filter.
FWPM_LAYER_ENUM_TEMPLATE0 Used for enumerating layers.
FWPM_LAYER0 Schema information for a layer.
FWPM_NET_EVENT_CAPABILITY_ALLOW0 Contains information about network traffic allowed in relation to an app container network capability.
FWPM_NET_EVENT_CAPABILITY_DROP0 Contains information about network traffic dropped in relation to an app container network capability.
FWPM_NET_EVENT_CLASSIFY_ALLOW0 Contains information that describes allowed traffic as enforced by the WFP classify engine.
FWPM_NET_EVENT_CLASSIFY_DROP_MAC0 Contains information that describes a MAC layer drop failure.
FWPM_NET_EVENT_CLASSIFY_DROP0 Contains information that describes a layer drop failure. (FWPM_NET_EVENT_CLASSIFY_DROP0)
FWPM_NET_EVENT_CLASSIFY_DROP1 Contains information that describes a layer drop failure. (FWPM_NET_EVENT_CLASSIFY_DROP1)
FWPM_NET_EVENT_CLASSIFY_DROP2 Contains information that describes a layer drop failure. (FWPM_NET_EVENT_CLASSIFY_DROP2)
FWPM_NET_EVENT_ENUM_TEMPLATE0 Used for enumerating net events.
FWPM_NET_EVENT_HEADER0 Information common to all events.
FWPM_NET_EVENT_HEADER1 Information common to all events. Reserved.
FWPM_NET_EVENT_HEADER2 Contains information common to all events. (FWPM_NET_EVENT_HEADER2)
FWPM_NET_EVENT_HEADER3 Contains information common to all events. (FWPM_NET_EVENT_HEADER3)
FWPM_NET_EVENT_IKEEXT_EM_FAILURE0 The FWPM_NET_EVENT_IKEEXT_EM_FAILURE0 structure contains information that describes an IKE Extended Mode (EM) failure.Note  FWPM_NET_EVENT_IKEEXT_EM_FAILURE0 is the specific implementation of FWPM_NET_EVENT_IKEEXT_EM_FAILURE used in Windows Vista.
FWPM_NET_EVENT_IKEEXT_EM_FAILURE1 The FWPM_NET_EVENT_IKEEXT_EM_FAILURE1 structure contains information that describes an IKE Extended mode (EM) failure.Note  FWPM_NET_EVENT_IKEEXT_EM_FAILURE1 is the specific implementation of FWPM_NET_EVENT_IKEEXT_EM_FAILURE used in Windows 7 and later.
FWPM_NET_EVENT_IKEEXT_MM_FAILURE0 Contains information that describes an IKE/AuthIP Main Mode (MM) failure. (FWPM_NET_EVENT_IKEEXT_MM_FAILURE0)
FWPM_NET_EVENT_IKEEXT_MM_FAILURE1 Contains information that describes an IKE/AuthIP Main Mode (MM) failure. (FWPM_NET_EVENT_IKEEXT_MM_FAILURE1)
FWPM_NET_EVENT_IKEEXT_QM_FAILURE0 Contains information that describes an IKE/AuthIP Quick Mode (QM) failure.
FWPM_NET_EVENT_IKEEXT_QM_FAILURE1 Contains information that describes an IKE/AuthIP Quick Mode (QM) failure. FWPM_NET_EVENT_IKEEXT_QM_FAILURE0 is also available.
FWPM_NET_EVENT_IPSEC_DOSP_DROP0 Contains information that describes an IPsec DoS Protection drop event.
FWPM_NET_EVENT_IPSEC_KERNEL_DROP0 Contains information that describes an IPsec kernel drop event.
FWPM_NET_EVENT_LPM_PACKET_ARRIVAL0 Contains information that describes the IPSec Security Parameter Index (SPI) value.
FWPM_NET_EVENT_SUBSCRIPTION0 Stores information used to subscribe to notifications about a network event.
FWPM_NET_EVENT0 Contains information about all event types. (FWPM_NET_EVENT0)
FWPM_NET_EVENT1 Contains information about all event types. (FWPM_NET_EVENT1)
FWPM_NET_EVENT2 Contains information about all event types. (FWPM_NET_EVENT2)
FWPM_NET_EVENT3 Contains information about all event types. (FWPM_NET_EVENT3)
FWPM_NET_EVENT4 Contains information about all event types. FWPM_NET_EVENT3 and FWPM_NET_EVENT2 are available. For Windows 7, FWPM_NET_EVENT1 is available. For Windows Vista, FWPM_NET_EVENT0 is available.
FWPM_NET_EVENT5 Contains information about all event types. FWPM_NET_EVENT4, FWPM_NET_EVENT3, and FWPM_NET_EVENT2 are available. For Windows 7, FWPM_NET_EVENT1 is available. For Windows Vista, FWPM_NET_EVENT0 is available.
FWPM_NETWORK_CONNECTION_POLICY_SETTING0 Stores a type and value pair for a connection policy setting.
FWPM_NETWORK_CONNECTION_POLICY_SETTINGS0 Stores an array of FWPM_NETWORK_CONNECTION_POLICY_SETTING0 values, together with the number of elements in that array.
FWPM_PROVIDER_CHANGE0 Change notification dispatched to subscribers. (FWPM_PROVIDER_CHANGE0)
FWPM_PROVIDER_CONTEXT_CHANGE0 Change notification dispatched to subscribers. (FWPM_PROVIDER_CONTEXT_CHANGE0)
FWPM_PROVIDER_CONTEXT_ENUM_TEMPLATE0 Used for enumerating provider contexts.
FWPM_PROVIDER_CONTEXT_SUBSCRIPTION0 Used to subscribe for change notifications. (FWPM_PROVIDER_CONTEXT_SUBSCRIPTION0)
FWPM_PROVIDER_CONTEXT0 Stores the state associated with a provider context. (FWPM_PROVIDER_CONTEXT0)
FWPM_PROVIDER_CONTEXT1 Stores the state associated with a provider context. (FWPM_PROVIDER_CONTEXT1)
FWPM_PROVIDER_CONTEXT2 Stores the state associated with a provider context. (FWPM_PROVIDER_CONTEXT2)
FWPM_PROVIDER_CONTEXT3 Stores the state associated with a provider context. FWPM_PROVIDER_CONTEXT0, FWPM_PROVIDER_CONTEXT1, and FWPM_PROVIDER_CONTEXT2 are available.
FWPM_PROVIDER_ENUM_TEMPLATE0 Used for enumerating providers.
FWPM_PROVIDER_SUBSCRIPTION0 Used to subscribe for change notifications. (FWPM_PROVIDER_SUBSCRIPTION0)
FWPM_PROVIDER0 Stores the state associated with a policy provider.
FWPM_SESSION_ENUM_TEMPLATE0 Used for enumerating sessions.
FWPM_SESSION0 Stores the state associated with a client session.
FWPM_SUBLAYER_CHANGE0 Change notification dispatched to subscribers. (FWPM_SUBLAYER_CHANGE0)
FWPM_SUBLAYER_ENUM_TEMPLATE0 Is used for enumerating sublayers.
FWPM_SUBLAYER_SUBSCRIPTION0 Used to subscribe for change notifications. (FWPM_SUBLAYER_SUBSCRIPTION0)
FWPM_SUBLAYER0 Stores the state associated with a sublayer.
FWPM_SYSTEM_PORTS_BY_TYPE0 The FWPM_SYSTEM_PORTS_BY_TYPE0 structure.
FWPM_SYSTEM_PORTS0 The FWPM_SYSTEM_PORTS0 structure.
FWPM_VSWITCH_EVENT_SUBSCRIPTION0 Stores information used to subscribe to notifications about a vSwitch event.
FWPM_VSWITCH_EVENT0 Contains information about a vSwitch event.
FWPS_INCOMING_METADATA_VALUES0 Defines metadata values that the filter engine passes to a callout's classifyFn callout function.
IKEEXT_AUTHENTICATION_METHOD0 Specifies various parameters for IKE/AuthIP authentication.
IKEEXT_AUTHENTICATION_METHOD1 Specifies various parameters for IKE/Authip authentication. (IKEEXT_AUTHENTICATION_METHOD1)
IKEEXT_AUTHENTICATION_METHOD2 Specifies various parameters for IKE/Authip authentication. (IKEEXT_AUTHENTICATION_METHOD2)
IKEEXT_CERT_EKUS0 Contains information about the extended key usage (EKU) properties of a certificate.
IKEEXT_CERT_NAME0 Specifies certificate selection "subject" criteria for an authentication method.
IKEEXT_CERT_ROOT_CONFIG0 Stores the IKE, AuthIP, or IKEv2 certificate root configuration.
IKEEXT_CERTIFICATE_AUTHENTICATION0 Is used to specify various parameters for authentication with certificates. (IKEEXT_CERTIFICATE_AUTHENTICATION0)
IKEEXT_CERTIFICATE_AUTHENTICATION1 Is used to specify various parameters for authentication with certificates. (IKEEXT_CERTIFICATE_AUTHENTICATION1)
IKEEXT_CERTIFICATE_AUTHENTICATION2 Is used to specify various parameters for authentication with certificates. (IKEEXT_CERTIFICATE_AUTHENTICATION2)
IKEEXT_CERTIFICATE_CREDENTIAL0 Is used to store credential information specific to certificate authentication. (IKEEXT_CERTIFICATE_CREDENTIAL0)
IKEEXT_CERTIFICATE_CREDENTIAL1 Is used to store credential information specific to certificate authentication. (IKEEXT_CERTIFICATE_CREDENTIAL1)
IKEEXT_CERTIFICATE_CRITERIA0 Contains a set of criteria to applied to an authentication method.
IKEEXT_CIPHER_ALGORITHM0 Stores information about the IKE/AuthIP encryption algorithm.
IKEEXT_COMMON_STATISTICS0 Various statistics common to IKE and Authip. (IKEEXT_COMMON_STATISTICS0)
IKEEXT_COMMON_STATISTICS1 Various statistics common to IKE, Authip, and IKEv2.
IKEEXT_COOKIE_PAIR0 Used to store a pair of IKE/Authip cookies.
IKEEXT_CREDENTIAL_PAIR0 Is used to store credential information used for the authentication. (IKEEXT_CREDENTIAL_PAIR0)
IKEEXT_CREDENTIAL_PAIR1 Is used to store credential information used for the authentication. (IKEEXT_CREDENTIAL_PAIR1)
IKEEXT_CREDENTIAL_PAIR2 Is used to store credential information used for the authentication. (IKEEXT_CREDENTIAL_PAIR2)
IKEEXT_CREDENTIAL0 Is used to store credential information used for the authentication. (IKEEXT_CREDENTIAL0)
IKEEXT_CREDENTIAL1 Is used to store credential information used for the authentication. (IKEEXT_CREDENTIAL1)
IKEEXT_CREDENTIAL2 Is used to store credential information used for the authentication. (IKEEXT_CREDENTIAL2)
IKEEXT_CREDENTIALS0 Is used to store multiple credential pairs. (IKEEXT_CREDENTIALS0)
IKEEXT_CREDENTIALS1 Is used to store multiple credential pairs. (IKEEXT_CREDENTIALS1)
IKEEXT_CREDENTIALS2 Is used to store multiple credential pairs. (IKEEXT_CREDENTIALS2)
IKEEXT_EAP_AUTHENTICATION0 Stores information needed for Extensible Authentication Protocol (EAP) authentication.
IKEEXT_EM_POLICY0 Is used to store AuthIP's extended mode negotiation policy. (IKEEXT_EM_POLICY0)
IKEEXT_EM_POLICY1 Is used to store AuthIP's extended mode negotiation policy. (IKEEXT_EM_POLICY1)
IKEEXT_EM_POLICY2 Is used to store AuthIP's extended mode negotiation policy. (IKEEXT_EM_POLICY2)
IKEEXT_INTEGRITY_ALGORITHM0 Stores the IKE/AuthIP hash algorithm.
IKEEXT_IP_VERSION_SPECIFIC_COMMON_STATISTICS0 Various statistics common to IKE and Authip. (IKEEXT_IP_VERSION_SPECIFIC_COMMON_STATISTICS0)
IKEEXT_IP_VERSION_SPECIFIC_COMMON_STATISTICS1 Various statistics common to the keying module (IKE, Authip, and IKEv2).
IKEEXT_IP_VERSION_SPECIFIC_KEYMODULE_STATISTICS0 Various statistics specific to the keying module and IP version.
IKEEXT_IP_VERSION_SPECIFIC_KEYMODULE_STATISTICS1 Various statistics specific to the keying module (IKE, Authip, and IKEv2) and IP version.
IKEEXT_IPV6_CGA_AUTHENTICATION0 Is used to specify various parameters for IPV6 cryptographically generated address (CGA) authentication.
IKEEXT_KERBEROS_AUTHENTICATION0 Contains information needed for preshared key authentication. (IKEEXT_KERBEROS_AUTHENTICATION0)
IKEEXT_KERBEROS_AUTHENTICATION1 Contains information needed for preshared key authentication. (IKEEXT_KERBEROS_AUTHENTICATION1)
IKEEXT_KEYMODULE_STATISTICS0 Contains various statistics specific to the keying module. (IKEEXT_KEYMODULE_STATISTICS0)
IKEEXT_KEYMODULE_STATISTICS1 Contains various statistics specific to the keying module. (IKEEXT_KEYMODULE_STATISTICS1)
IKEEXT_NAME_CREDENTIAL0 Is used to store credential name information.
IKEEXT_NTLM_V2_AUTHENTICATION0 Contains information needed for Microsoft Windows NT LAN Manager (NTLM) V2 authentication.
IKEEXT_POLICY0 Is used to store the IKE/AuthIP main mode negotiation policy. (IKEEXT_POLICY0)
IKEEXT_POLICY1 Is used to store the IKE/AuthIP main mode negotiation policy. (IKEEXT_POLICY1)
IKEEXT_POLICY2 Is used to store the IKE/AuthIP main mode negotiation policy. (IKEEXT_POLICY2)
IKEEXT_PRESHARED_KEY_AUTHENTICATION0 Stores information needed for pre-shared key authentication. (IKEEXT_PRESHARED_KEY_AUTHENTICATION0)
IKEEXT_PRESHARED_KEY_AUTHENTICATION1 Stores information needed for pre-shared key authentication. (IKEEXT_PRESHARED_KEY_AUTHENTICATION1)
IKEEXT_PROPOSAL0 Is used to store an IKE/AuthIP main mode proposal.
IKEEXT_RESERVED_AUTHENTICATION0 Reserved for internal use.
IKEEXT_SA_DETAILS0 Is used to store information returned when enumerating IKE, AuthIP, or IKEv2 security associations (SAs).
IKEEXT_SA_DETAILS1 Is used to store information returned when enumerating IKE, AuthIP, and IKEv2 security associations (SAs). (IKEEXT_SA_DETAILS1)
IKEEXT_SA_DETAILS2 Is used to store information returned when enumerating IKE, AuthIP, and IKEv2 security associations (SAs). (IKEEXT_SA_DETAILS2)
IKEEXT_SA_ENUM_TEMPLATE0 Is an enumeration template used for enumerating IKE/AuthIP security associations (SAs).
IKEEXT_STATISTICS0 Stores various IKE/AuthIP statistics.
IKEEXT_STATISTICS1 Stores various IKE, AuthIP, and IKEv2 statistics.
IKEEXT_TRAFFIC0 Specifies the IKE/Authip traffic.
IPSEC_ADDRESS_INFO0 Is used to store mobile additional address information.
IPSEC_AGGREGATE_DROP_PACKET_STATISTICS0 Stores aggregate IPsec kernel packet drop statistics.Note  IPSEC_AGGREGATE_DROP_PACKET_STATISTICS0 is the specific implementation of IPSEC_AGGREGATE_DROP_PACKET_STATISTICS used in Windows Vista.
IPSEC_AGGREGATE_DROP_PACKET_STATISTICS1 Stores aggregate IPsec kernel packet drop statistics.
IPSEC_AGGREGATE_SA_STATISTICS0 Stores aggregate IPsec kernel security association (SA) statistics.
IPSEC_AH_DROP_PACKET_STATISTICS0 Stores IPsec AH drop packet statistics.
IPSEC_AUTH_AND_CIPHER_TRANSFORM0 Is used to store hash and encryption specific information together for an SA transform in an IPsec quick mode policy.
IPSEC_AUTH_TRANSFORM_ID0 Is used to uniquely identify the hash algorithm used in an IPsec security association (SA).
IPSEC_AUTH_TRANSFORM0 Specifies hash specific information for an SA transform.
IPSEC_CIPHER_TRANSFORM_ID0 Specifies information used to uniquely identify the encryption algorithm used in an IPsec SA.
IPSEC_CIPHER_TRANSFORM0 Is used to store encryption specific information for an SA transform in an IPsec quick mode policy.
IPSEC_DOSP_OPTIONS0 Used to store configuration parameters for IPsec DoS Protection.
IPSEC_DOSP_STATE_ENUM_TEMPLATE0 The IPSEC_DOSP_STATE_ENUM_TEMPLATE0 structure.
IPSEC_DOSP_STATE0 Used to store state information for IPsec DoS Protection.
IPSEC_DOSP_STATISTICS0 The IPSEC_DOSP_STATISTICS0 structure.
IPSEC_ESP_DROP_PACKET_STATISTICS0 Stores ESP drop packet statistics.
IPSEC_GETSPI0 The IPSEC_GETSPI0 structure contains information that must be supplied when requesting a security parameter index (SPI) from the IPsec driver.Note  IPSEC_GETSPI0 is the specific implementation of IPSEC_GETSPI used in Windows Vista.
IPSEC_GETSPI1 The IPSEC_GETSPI1 structure contains information that must be supplied when requesting a security parameter index (SPI) from the IPsec driver.Note  IPSEC_GETSPI1 is the specific implementation of IPSEC_GETSPI used in Windows 7 and later.
IPSEC_ID0 Contains information corresponding to identities that are authenticated by IPsec.
IPSEC_KEY_MANAGER_CALLBACKS0 Specifies the set of callbacks which should be invoked by IPsec at various stages of SA negotiation.
IPSEC_KEY_MANAGER0 Used to register key management callbacks with IPsec.
IPSEC_KEYING_POLICY0 Defines an unordered set of keying modules that will be tried for IPsec. (IPSEC_KEYING_POLICY0)
IPSEC_KEYING_POLICY1 Defines an unordered set of keying modules that will be tried for IPsec. (IPSEC_KEYING_POLICY1)
IPSEC_KEYMODULE_STATE0 Stores Internet Protocol Security (IPsec) keying module specific information.
IPSEC_PROPOSAL0 Used to store an IPsec quick mode proposal.
IPSEC_SA_AUTH_AND_CIPHER_INFORMATION0 Stores information about the authentication and encryption algorithms of an IPsec security association (SA).
IPSEC_SA_AUTH_INFORMATION0 Stores information about the authentication algorithm of an IPsec security association (SA).
IPSEC_SA_BUNDLE0 Is used to store information about an IPsec security association (SA) bundle. (IPSEC_SA_BUNDLE0)
IPSEC_SA_BUNDLE1 Is used to store information about an IPsec security association (SA) bundle. (IPSEC_SA_BUNDLE1)
IPSEC_SA_CIPHER_INFORMATION0 Stores information about the encryption algorithm of an IPsec security association (SA).
IPSEC_SA_CONTEXT_CHANGE0 Contains information about an IPsec security association (SA) context change.
IPSEC_SA_CONTEXT_ENUM_TEMPLATE0 Enumeration template used to enumerate security association (SA) contexts.
IPSEC_SA_CONTEXT_SUBSCRIPTION0 Stores information used to subscribe to notifications about a particular IPsec security association (SA) context.
IPSEC_SA_CONTEXT0 Encapsulates an inbound and outbound SA pair.
IPSEC_SA_CONTEXT1 Encapsulates an inbound and outbound security association (SA) pair.
IPSEC_SA_DETAILS0 Is used to store information returned when enumerating IPsec security associations (SAs). (IPSEC_SA_DETAILS0)
IPSEC_SA_DETAILS1 Is used to store information returned when enumerating IPsec security associations (SAs). (IPSEC_SA_DETAILS1)
IPSEC_SA_ENUM_TEMPLATE0 Specifies a template used for restricting the enumeration of IPsec security associations (SAs).
IPSEC_SA_IDLE_TIMEOUT0 The security association (SA) idle timeout in IPsec policy.
IPSEC_SA_LIFETIME0 Stores the lifetime in seconds/kilobytes/packets for an IPsec security association (SA).
IPSEC_SA_TRANSFORM0 Is used to store an IPsec security association (SA) transform in an IPsec quick mode policy.
IPSEC_SA0 Is used to store information about an IPsec security association (SA).
IPSEC_STATISTICS0 Is the top-level of the IPsec statistics structures. (IPSEC_STATISTICS0)
IPSEC_STATISTICS1 Is the top-level of the IPsec statistics structures. (IPSEC_STATISTICS1)
IPSEC_TOKEN0 Various information about an IPsec-specific access token.
IPSEC_TRAFFIC_STATISTICS0 Stores IPsec traffic statistics. (IPSEC_TRAFFIC_STATISTICS0)
IPSEC_TRAFFIC_STATISTICS1 Stores IPsec traffic statistics. (IPSEC_TRAFFIC_STATISTICS1)
IPSEC_TRAFFIC0 Specifies parameters to describe IPsec traffic. (IPSEC_TRAFFIC0)
IPSEC_TRAFFIC1 Specifies parameters to describe IPsec traffic. (IPSEC_TRAFFIC1)
IPSEC_TRANSPORT_POLICY0 Stores the quick mode negotiation policy for transport mode IPsec. (IPSEC_TRANSPORT_POLICY0)
IPSEC_TRANSPORT_POLICY1 Stores the quick mode negotiation policy for transport mode IPsec. (IPSEC_TRANSPORT_POLICY1)
IPSEC_TRANSPORT_POLICY2 Stores the quick mode negotiation policy for transport mode IPsec. (IPSEC_TRANSPORT_POLICY2)
IPSEC_TUNNEL_ENDPOINT0 Used to store address information for an end point of a tunnel mode SA.
IPSEC_TUNNEL_ENDPOINTS0 Is used to store end points of a tunnel mode SA. (IPSEC_TUNNEL_ENDPOINTS0)
IPSEC_TUNNEL_ENDPOINTS1 Is used to store end points of a tunnel mode SA. (IPSEC_TUNNEL_ENDPOINTS1)
IPSEC_TUNNEL_ENDPOINTS2 Is used to store end points of a tunnel mode SA. (IPSEC_TUNNEL_ENDPOINTS2)
IPSEC_TUNNEL_POLICY0 Stores the quick mode negotiation policy for tunnel mode IPsec. (IPSEC_TUNNEL_POLICY0)
IPSEC_TUNNEL_POLICY1 Stores the quick mode negotiation policy for tunnel mode IPsec. (IPSEC_TUNNEL_POLICY1)
IPSEC_TUNNEL_POLICY2 Stores the quick mode negotiation policy for tunnel mode IPsec. (IPSEC_TUNNEL_POLICY2)
IPSEC_V4_UDP_ENCAPSULATION0 Stores the User Datagram Protocol (UDP) encapsulation ports for Encapsulating Security Payload (ESP) encapsulation.
IPSEC_VIRTUAL_IF_TUNNEL_INFO0 Is used to store information specific to virtual interface tunneling.