WSD Dependency
Components may utilize WSD or WSD/WSD event logging in combination. The following are the rules required for WSD:
dir="in" protocol="17" lport="3702" binary="<YOUR BINARY THAT HOSTS WSD INPROC>" svc="<YOUR SERVICE THAT IS HOSTED BY THE BINARY>"
dir="out" protocol="17" rport="3702" binary="<YOUR BINARY THAT HOSTS sWSD INPROC>" svc="<YOUR SERVICE THAT IS HOSTED BY THE BINARY>"
If you require WSD event logging then you will need two additional rules:
dir="in" protocol="6" lport="5357" binary="System"
dir="out" protocol="6" rport="5357" binary="System"