Filtering Conditions Available at Each Filtering Layer

The Windows Filtering Platform (WFP) filter engine supports a different set of filtering conditions at each of its filtering layers.

The list of filtering conditions that are available at each layer are as follows.

FWPM_LAYER_INBOUND_IPPACKET_V4 / FWPM_LAYER_INBOUND_IPPACKET_V4_DISCARD / FWPM_LAYER_INBOUND_IPPACKET_V6 / FWPM_LAYER_INBOUND_IPPACKET_V6_DISCARD

  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_INTERFACE_INDEX
  • FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_TUNNEL_TYPE

FWPM_LAYER_OUTBOUND_IPPACKET_V4 / FWPM_LAYER_OUTBOUND_IPPACKET_V4_DISCARD / FWPM_LAYER_OUTBOUND_IPPACKET_V6 / FWPM_LAYER_OUTBOUND_IPPACKET_V6_DISCARD

  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_INTERFACE_INDEX
  • FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_TUNNEL_TYPE

FWPM_LAYER_IPFORWARD_V4 / FWPM_LAYER_IPFORWARD_V4_DISCARD / FWPM_LAYER_IPFORWARD_V6 / FWPM_LAYER_IPFORWARD_V6_DISCARD

  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_DESTINATION_INTERFACE_INDEX
  • FWPM_CONDITION_DESTINATION_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_IP_DESTINATION_ADDRESS
  • FWPM_CONDITION_IP_DESTINATION_ADDRESS_TYPE
  • FWPM_CONDITION_IP_FORWARD_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_SOURCE_ADDRESS
  • FWPM_CONDITION_SOURCE_INTERFACE_INDEX
  • FWPM_CONDITION_SOURCE_SUB_INTERFACE_INDEX

Windows 7 and later

  • FWPM_CONDITION_IP_PHYSICAL_ARRIVAL_INTERFACE
  • FWPM_CONDITION_IP_PHYSICAL_NEXTHOP_INTERFACE
  • FWPM_CONDITION_ARRIVAL_INTERFACE_PROFILE_ID
  • FWPM_CONDITION_NEXTHOP_INTERFACE_PROFILE_ID

FWPM_LAYER_INBOUND_TRANSPORT_V4 / FWPM_LAYER_INBOUND_TRANSPORT_V4_DISCARD / FWPM_LAYER_INBOUND_TRANSPORT_V6 / FWPM_LAYER_INBOUND_TRANSPORT_V6_DISCARD

  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_INTERFACE_INDEX
  • FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_PORT
  • FWPM_CONDITION_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_TUNNEL_TYPE

Windows 7 and later

  • FWPM_CONDITION_CURRENT_PROFILE_ID

FWPM_LAYER_OUTBOUND_TRANSPORT_V4 / FWPM_LAYER_OUTBOUND_TRANSPORT_V4_DISCARD / FWPM_LAYER_OUTBOUND_TRANSPORT_V6 / FWPM_LAYER_OUTBOUND_TRANSPORT_V6_DISCARD

  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_INTERFACE_INDEX
  • FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_IP_DESTINATION_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_PORT
  • FWPM_CONDITION_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_TUNNEL_TYPE

Windows 7 and later

  • FWPM_CONDITION_CURRENT_PROFILE_ID

FWPM_LAYER_STREAM_V4 / FWPM_LAYER_STREAM_V4_DISCARD / FWPM_LAYER_STREAM_V6 / FWPM_LAYER_STREAM_V6_DISCARD

  • FWPM_CONDITION_DIRECTION
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_PORT

FWPM_LAYER_DATAGRAM_DATA_V4 / FWPM_LAYER_DATAGRAM_DATA_V4_DISCARD / FWPM_LAYER_DATAGRAM_DATA_V6 / FWPM_LAYER_DATAGRAM_DATA_V6_DISCARD

  • FWPM_CONDITION_DIRECTION
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_INTERFACE_INDEX
  • FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_PORT
  • FWPM_CONDITION_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_TUNNEL_TYPE

FWPM_LAYER_STREAM_PACKET V4 / FWPM_LAYER_STREAM_PACKET V6

Windows 7 and later

  • FWPM_CONDITION_DIRECTION
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_INTERFACE_INDEX
  • FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_PORT
  • FWPM_CONDITION_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_TUNNEL_TYPE

FWPM_LAYER_INBOUND_ICMP_ERROR_V4 / FWPM_LAYER_INBOUND_ICMP_ERROR_V4_DISCARD / FWPM_LAYER_INBOUND_ICMP_ERROR_V6 / FWPM_LAYER_INBOUND_ICMP_ERROR_V6_DISCARD

  • FWPM_CONDITION_ARRIVAL_INTERFACE_INDEX

  • FWPM_CONDITION_ARRIVAL_INTERFACE_TYPE

  • FWPM_CONDITION_ARRIVAL_SUB_INTERFACE_INDEX Windows Vista / Windows 7: FWPM_CONDITION_SUB_INTERFACE_INDEX

  • FWPM_CONDITION_ARRIVAL_TUNNEL_TYPE

  • FWPM_CONDITION_FLAGS

  • FWPM_CONDITION_ICMP_CODE

  • FWPM_CONDITION_ICMP_TYPE

  • FWPM_CONDITION_EMBEDDED_LOCAL_ADDRESS_TYPE

  • FWPM_CONDITION_EMBEDDED_LOCAL_PORT

  • FWPM_CONDITION_EMBEDDED_PROTOCOL

  • FWPM_CONDITION_EMBEDDED_REMOTE_ADDRESS

  • FWPM_CONDITION_EMBEDDED_REMOTE_PORT

  • FWPM_CONDITION_IP_ARRIVAL_INTERFACE

  • FWPM_CONDITION_IP_LOCAL_ADDRESS

  • FWPM_CONDITION_IP_LOCAL_INTERFACE

  • FWPM_CONDITION_IP_REMOTE_ADDRESS

  • FWPM_CONDITION_LOCAL_INTERFACE_INDEX Windows Vista / Windows 7: FWPM_CONDITION_INTERFACE_INDEX

  • FWPM_CONDITION_LOCAL_INTERFACE_TYPE Windows Vista / Windows 7: FWPM_CONDITION_INTERFACE_TYPE

  • FWPM_CONDITION_LOCAL_TUNNEL_TYPE Windows Vista / Windows 7: FWPM_CONDITION_TUNNEL_TYPE

Windows 7 and later

  • FWPM_CONDITION_ARRIVAL_INTERFACE_PROFILE_ID

FWPM_LAYER_OUTBOUND_ICMP_ERROR_V4 / FWPM_LAYER_OUTBOUND_ICMP_ERROR_V4_DISCARD / FWPM_LAYER_OUTBOUND_ICMP_ERROR_V6 / FWPM_LAYER_OUTBOUND_ICMP_ERROR_V6_DISCARD

  • FWPM_CONDITION_FLAGS

  • FWPM_CONDITION_ICMP_CODE

  • FWPM_CONDITION_ICMP_TYPE

  • FWPM_CONDITION_INTERFACE_INDEX

  • FWPM_CONDITION_INTERFACE_TYPE

  • FWPM_CONDITION_IP_LOCAL_ADDRESS

  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE

  • FWPM_CONDITION_IP_LOCAL_INTERFACE

  • FWPM_CONDITION_IP_REMOTE_ADDRESS

  • FWPM_CONDITION_SUB_INTERFACE_INDEX

  • FWPM_CONDITION_TUNNEL_TYPE

Windows 7 and later

  • FWPM_CONDITION_NEXTHOP_INTERFACE_PROFILE_ID

FWPM_LAYER_ALE_BIND_REDIRECT_V4 / FWPM_LAYER_ALE_BIND_REDIRECT V6

Windows 7 and later

  • FWPM_CONDITION_ALE_APP_ID
  • FWPM_CONDITION_ALE_USER_ID
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL

Windows 8 and later

  • FWPM_CONDITION_ALE_PACKAGE_ID

FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4 / FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4_DISCARD / FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6 / FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6_DISCARD

  • FWPM_CONDITION_ALE_APP_ID
  • FWPM_CONDITION_ALE_PROMISCUOUS_MODE
  • FWPM_CONDITION_ALE_USER_ID
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL
  • FWPM_CONDITION_TUNNEL_TYPE

Windows 7 and later

  • FWPM_CONDITION_LOCAL_INTERFACE_PROFILE_ID
  • FWPM_CONDITION_ALE_SIO_FIREWALL_SYSTEM_PORT

Windows 8 and later

  • FWPM_CONDITION_ALE_PACKAGE_ID

FWPM_LAYER_ALE_RESOURCE_RELEASE_V4 / FWPM_LAYER_ALE_RESOURCE_RELEASE_V6

Windows 7 and later

  • FWPM_CONDITION_ALE_APP_ID
  • FWPM_CONDITION_ALE_USER_ID
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL

Windows 8 and later

  • FWPM_CONDITION_ALE_PACKAGE_ID

FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V4 / FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V6

Windows 7 and later

  • FWPM_CONDITION_ALE_APP_ID
  • FWPM_CONDITION_ALE_USER_ID
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_PORT

Windows 8 and later

  • FWPM_CONDITION_ALE_PACKAGE_ID

FWPM_LAYER_ALE_AUTH_LISTEN_V4 / FWPM_LAYER_ALE_AUTH_LISTEN_V4_DISCARD / FWPM_LAYER_ALE_AUTH_LISTEN_V6 / FWPM_LAYER_ALE_AUTH_LISTEN_V6_DISCARD

  • FWPM_CONDITION_ALE_APP_ID
  • FWPM_CONDITION_ALE_USER_ID
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_TUNNEL_TYPE

Windows 7 and later

  • FWPM_CONDITION_LOCAL_INTERFACE_PROFILE_ID
  • FWPM_CONDITION_ALE_SIO_FIREWALL_SYSTEM_PORT

Windows 8 and later

  • FWPM_CONDITION_ALE_PACKAGE_ID

FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4 / FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4_DISCARD / FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 / FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6_DISCARD

  • FWPM_CONDITION_ALE_APP_ID
  • FWPM_CONDITION_ALE_NAP_CONTEXT
  • FWPM_CONDITION_ALE_REMOTE_MACHINE_ID
  • FWPM_CONDITION_ALE_REMOTE_USER_ID
  • FWPM_CONDITION_ALE_SIO_FIREWALL_SYSTEM_PORT
  • FWPM_CONDITION_ALE_USER_ID
  • FWPM_CONDITION_ARRIVAL_INTERFACE_INDEX
  • FWPM_CONDITION_ARRIVAL_INTERFACE_TYPE
  • FWPM_CONDITION_ARRIVAL_SUB_INTERFACE_INDEX Windows Vista / Windows 7: FWPM_CONDITION_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_ARRIVAL_TUNNEL_TYPE
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_IP_ARRIVAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_PORT
  • FWPM_CONDITION_LOCAL_INTERFACE_INDEX Windows Vista / Windows 7: FWPM_CONDITION_INTERFACE_INDEX
  • FWPM_CONDITION_LOCAL_INTERFACE_TYPE Windows Vista / Windows 7: FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_LOCAL_TUNNEL_TYPE Windows Vista / Windows 7: FWPM_CONDITION_TUNNEL_TYPE

Windows 7 and later

  • FWPM_CONDITION_NEXTHOP_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_IP_NEXTHOP_INTERFACE
  • FWPM_CONDITION_NEXTHOP_INTERFACE_TYPE
  • FWPM_CONDITION_NEXTHOP_TUNNEL_TYPE
  • FWPM_CONDITION_NEXTHOP_INTERFACE_INDEX
  • FWPM_CONDITION_ORIGINAL_PROFILE_ID
  • FWPM_CONDITION_CURRENT_PROFILE_ID
  • FWPM_CONDITION_REAUTHORIZE_REASON
  • FWPM_CONDITION_ORIGINAL_ICMP_TYPE

Windows 8 and later

  • FWPM_CONDITION_ALE_PACKAGE_ID

FWPM_LAYER_ALE_CONNECT_REDIRECT_V4 / FWPM_LAYER_ALE_CONNECT_REDIRECT V6

Windows 7 and later

  • FWPM_CONDITION_ALE_APP_ID
  • FWPM_CONDITION_ALE_USER_ID
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL
  • FWPM_CONDITION_IP_REMOTE_PORT
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_IP_DESTINATION_ADDRESS_TYPE

Windows 8 and later

  • FWPM_CONDITION_ALE_PACKAGE_ID

FWPM_LAYER_ALE_AUTH_CONNECT_V4 / FWPM_LAYER_ALE_AUTH_CONNECT_V4_DISCARD / FWPM_LAYER_ALE_AUTH_CONNECT_V6 / FWPM_LAYER_ALE_AUTH_CONNECT_V6_DISCARD

  • FWPM_CONDITION_ALE_APP_ID
  • FWPM_CONDITION_ALE_REMOTE_MACHINE_ID
  • FWPM_CONDITION_ALE_REMOTE_USER_ID
  • FWPM_CONDITION_ALE_USER_ID
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_IP_DESTINATION_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_PORT
  • FWPM_CONDITION_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_TUNNEL_TYPE
  • FWPM_CONDITION_IP_ARRIVAL_INTERFACE
  • FWPM_CONDITION_ARRIVAL_INTERFACE_TYPE
  • FWPM_CONDITION_ARRIVAL_TUNNEL_TYPE
  • FWPM_CONDITION_ARRIVAL_INTERFACE_INDEX Windows Vista _sp1 and laterFWPM_CONDITION_INTERFACE_INDEX

Windows 7 and later

  • FWPM_CONDITION_NEXTHOP_SUB_INTERFACE_INDEX
  • FWPM_CONDITION_IP_NEXTHOP_INTERFACE
  • FWPM_CONDITION_NEXTHOP_INTERFACE_TYPE
  • FWPM_CONDITION_NEXTHOP_TUNNEL_TYPE
  • FWPM_CONDITION_NEXTHOP_INTERFACE_INDEX
  • FWPM_CONDITION_ORIGINAL_PROFILE_ID
  • FWPM_CONDITION_CURRENT_PROFILE_ID
  • FWPM_CONDITION_REAUTHORIZE_REASON
  • FWPM_CONDITION_PEER_NAME
  • FWPM_CONDITION_ORIGINAL_ICMP_TYPE

Windows 8 and later

  • FWPM_CONDITION_ALE_PACKAGE_ID

FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4 / FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4_DISCARD / FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6 / FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6_DISCARD

  • FWPM_CONDITION_ALE_APP_ID
  • FWPM_CONDITION_ALE_REMOTE_MACHINE_ID
  • FWPM_CONDITION_ALE_REMOTE_USER_ID
  • FWPM_CONDITION_ALE_USER_ID
  • FWPM_CONDITION_DIRECTION
  • FWPM_CONDITION_FLAGS
  • FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_IP_DESTINATION_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_PORT
  • FWPM_CONDITION_TUNNEL_TYPE

Windows 8 and later

  • FWPM_CONDITION_ALE_PACKAGE_ID

FWPM_LAYER_NAME_RESOLUTION_CACHE_V4 / FWPM_LAYER_NAME_RESOLUTION_CACHE_V6

Windows 7 and later

  • FWPM_CONDITION_ALE_USER_ID
  • FWPM_CONDITION_ALE_APP_ID
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_PEER_NAME

FWPM_LAYER_IPSEC_KM_DEMUX_V4 / FWPM_LAYER_IPSEC_KM_DEMUX_V6

  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_ADDRESS

FWPM_LAYER_IPSEC_V4 / FWPM_LAYER_IPSEC_V6

  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_PROTOCOL
  • FWPM_CONDITION_IP_REMOTE_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_PORT

Windows 7 and later

  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_CURRENT_PROFILE_ID

FWPM_LAYER_IKEEXT_V4 / FWPM_LAYER_IKEEXT_V6

  • FWPM_CONDITION_IP_LOCAL_ADDRESS
  • FWPM_CONDITION_IP_REMOTE_ADDRESS

Windows 7 and later

  • FWPM_CONDITION_IP_LOCAL_INTERFACE
  • FWPM_CONDITION_CURRENT_PROFILE_ID

FWPM_LAYER_RPC_UM

  • FWPM_CONDITION_DCOM_APP_ID
  • FWPM_CONDITION_IMAGE_NAME
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_V4
  • FWPM_CONDITION_IP_LOCAL_ADDRESS_V6
  • FWPM_CONDITION_IP_LOCAL_PORT
  • FWPM_CONDITION_IP_REMOTE_ADDRESS_V4
  • FWPM_CONDITION_IP_REMOTE_ADDRESS_V6
  • FWPM_CONDITION_PIPE
  • FWPM_CONDITION_REMOTE_USER_TOKEN
  • FWPM_CONDITION_RPC_AUTH_LEVEL
  • FWPM_CONDITION_RPC_AUTH_TYPE
  • FWPM_CONDITION_RPC_IF_FLAG
  • FWPM_CONDITION_RPC_IF_UUID
  • FWPM_CONDITION_RPC_IF_VERSION
  • FWPM_CONDITION_RPC_PROTOCOL
  • FWPM_CONDITION_SEC_ENCRYPT_ALGORITHM
  • FWPM_CONDITION_SEC_KEY_SIZE

FWPM_LAYER_RPC_EPMAP

  • FWPM_CONDITION_IP_LOCAL_ADDRESS_V4

  • FWPM_CONDITION_IP_LOCAL_ADDRESS_V6

  • FWPM_CONDITION_IP_LOCAL_PORT

  • FWPM_CONDITION_IP_REMOTE_ADDRESS_V4

  • FWPM_CONDITION_IP_REMOTE_ADDRESS_V6

  • FWPM_CONDITION_PIPE

  • FWPM_CONDITION_REMOTE_USER_TOKEN

  • FWPM_CONDITION_RPC_AUTH_LEVEL

  • FWPM_CONDITION_RPC_AUTH_TYPE

  • FWPM_CONDITION_RPC_IF_UUID

  • FWPM_CONDITION_RPC_IF_VERSION

  • FWPM_CONDITION_RPC_PROTOCOL

  • FWPM_CONDITION_SEC_ENCRYPT_ALGORITHM

  • FWPM_CONDITION_SEC_KEY_SIZE

FWPM_LAYER_RPC_EP_ADD

  • FWPM_CONDITION_PROCESS_WITH_RPC_IF_UUID
  • FWPM_CONDITION_RPC_EP_FLAGS
  • FWPM_CONDITION_RPC_EP_VALUE
  • FWPM_CONDITION_RPC_PROTOCOL

FWPM_LAYER_RPC_PROXY_CONN

  • FWPM_CONDITION_CLIENT_CERT_KEY_LENGTH
  • FWPM_CONDITION_CLIENT_CERT_OID
  • FWPM_CONDITION_CLIENT_TOKEN
  • FWPM_CONDITION_RPC_PROXY_AUTH_TYPE
  • FWPM_CONDITION_RPC_SERVER_NAME
  • FWPM_CONDITION_RPC_SERVER_PORT

FWPM_LAYER_RPC_PROXY_IF

  • FWPM_CONDITION_CLIENT_CERT_KEY_LENGTH
  • FWPM_CONDITION_CLIENT_CERT_OID
  • FWPM_CONDITION_CLIENT_TOKEN
  • FWPM_CONDITION_RPC_IF_UUID
  • FWPM_CONDITION_RPC_IF_VERSION
  • FWPM_CONDITION_RPC_PROXY_AUTH_TYPE
  • FWPM_CONDITION_RPC_SERVER_NAME
  • FWPM_CONDITION_RPC_SERVER_PORT

FWPM_LAYER_KM_AUTHORIZATION

Windows 7 and later

  • FWPM_CONDITION_REMOTE_ID
  • FWPM_CONDITION_AUTHENTICATION_TYPE
  • FWPM_CONDITION_KM_TYPE
  • FWPM_CONDITION_KM_MODE
  • FWPM_CONDITION_DIRECTION
  • FWPM_CONDITION_IPSEC_POLICY_KEY

FWPM_LAYER_INBOUND_MAC_FRAME_ETHERNET / FWPM_LAYER_OUTBOUND_MAC_FRAME_ETHERNET

Windows 8 and later

  • FWPM_CONDITION_INTERFACE_MAC_ADDRESS
  • FWPM_CONDITION_MAC_LOCAL_ADDRESS
  • FWPM_CONDITION_MAC_REMOTE_ADDRESS
  • FWPM_CONDITION_MAC_LOCAL_ADDRESS_TYPE
  • FWPM_CONDITION_MAC_REMOTE_ADDRESS_TYPE
  • FWPM_CONDITION_ETHER_TYPE
  • FWPM_CONDITION_VLAN_ID
  • FWPM_CONDITION_INTERFACE
  • FWPM_CONDITION_INTERFACE_INDEX
  • FWPM_CONDITION_NDIS_PORT
  • FWPM_CONDITION_L2_FLAGS

FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE / FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE

Windows 8 and later

  • FWPM_CONDITION_NDIS_MEDIA_TYPE
  • FWPM_CONDITION_NDIS_PHYSICAL_MEDIA_TYPE
  • FWPM_CONDITION_INTERFACE
  • FWPM_CONDITION_INTERFACE_TYPE
  • FWPM_CONDITION_INTERFACE_INDEX
  • FWPM_CONDITION_NDIS_PORT
  • FWPM_CONDITION_L2_FLAGS

FWPM_LAYER_EGRESS_VSWITCH_ETHERNET / FWPM_LAYER_INGRESS_VSWITCH_ETHERNET

Windows 8 and later

  • FWPM_CONDITION_MAC_SOURCE_ADDRESS
  • FWPM_CONDITION_MAC_SOURCE_ADDRESS_TYPE
  • FWPM_CONDITION_MAC_DESTINATION_ADDRESS
  • FWPM_CONDITION_MAC_DESTINATION_ADDRESS_TYPE
  • FWPM_CONDITION_ETHER_TYPE
  • FWPM_CONDITION_VLAN_ID
  • FWPM_CONDITION_VSWITCH_TENANT_NETWORK_ID
  • FWPM_CONDITION_VSWITCH_ID
  • FWPM_CONDITION_VSWITCH_NETWORK_TYPE
  • FWPM_CONDITION_VSWITCH_SOURCE_INTERFACE_ID
  • FWPM_CONDITION_VSWITCH_SOURCE_INTERFACE_TYPE
  • FWPM_CONDITION_VSWITCH_SOURCE_VM_ID
  • FWPM_CONDITION_VSWITCH_L2_FLAGS

FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V4 / FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V4 / FWPM_LAYER_EGRESSVSWITCH_TRANSPORT_V6 / FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V6

Windows 8 and later

  • FWPM_CONDITION_IP_SOURCE_ADDRESS
  • FWPM_CONDITION_IP_DESTINATION_ADDRESS
  • FWPM_CONDITION_IP_PROTOCOL
  • FWPM_CONDITION_IP_SOURCE_PORT
  • FWPM_CONDITION_IP_DESTINATION_PORT
  • FWPM_CONDITION_VLAN_ID
  • FWPM_CONDITION_VSWITCH_TENANT_NETWORK_ID
  • FWPM_CONDITION_VSWITCH_ID
  • FWPM_CONDITION_VSWITCH_NETWORK_TYPE
  • FWPM_CONDITION_VSWITCH_SOURCE_INTERFACE_ID
  • FWPM_CONDITION_VSWITCH_SOURCE_INTERFACE_TYPE
  • FWPM_CONDITION_VSWITCH_SOURCE_VM_ID
  • FWPM_CONDITION_VSWITCH_DESTINATION_INTERFACE_ID
  • FWPM_CONDITION_VSWITCH_DESTINATION_INTERFACE_TYPE
  • FWPM_CONDITION_VSWITCH_L2_FLAGS

Remarks

The V4 and V6 suffixes at the end of the layer identifiers indicate whether the layer is located in the IPv4 network stack or in the IPv6 network stack.

Requirements

Requirement Value
Minimum supported client
Windows Vista [desktop apps only]
Minimum supported server
Windows Server 2008 [desktop apps only]
Header
Fwpmu.h