5150(-): The Windows Filtering Platform blocked a packet.

This event is logged if the Windows Filtering Platform MAC filter blocked a packet.

There is no example of this event in this document.

Subcategory: Audit Filtering Platform Connection

Event Schema:

The Windows Filtering Platform has blocked a packet.

Network Information:

Direction:%1

Source Address:%2

Destination Address:%3

EtherType:%4

MediaType:%5

InterfaceType:%6

VlanTag:%7

Filter Information:

Filter Run-Time ID:%8

Layer Name:%9

Layer Run-Time ID:%10

Required Server Roles: None.

Minimum OS Version: Windows Server 2012, Windows 8.

Event Versions: 0.

Security Monitoring Recommendations