Filtering conditions available at each filtering layer
The Windows Filtering Platform (WFP) filter engine supports a different set of filtering conditions at each of its filtering layers.
The list of filtering conditions that are available at each layer are as follows.
FWPM_LAYER_INBOUND_IPPACKET_V4 / FWPM_LAYER_INBOUND_IPPACKET_V4_DISCARD / FWPM_LAYER_INBOUND_IPPACKET_V6 / FWPM_LAYER_INBOUND_IPPACKET_V6_DISCARD
- FWPM_CONDITION_FLAGS
- FWPM_CONDITION_INTERFACE_INDEX
- FWPM_CONDITION_INTERFACE_TYPE
- FWPM_CONDITION_IP_LOCAL_ADDRESS
- FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
- FWPM_CONDITION_IP_LOCAL_INTERFACE
- FWPM_CONDITION_IP_REMOTE_ADDRESS
- FWPM_CONDITION_SUB_INTERFACE_INDEX
- FWPM_CONDITION_TUNNEL_TYPE
Windows 10 and later
- FWPM_CONDITION_COMPARTMENT_ID
FWPM_LAYER_OUTBOUND_IPPACKET_V4 / FWPM_LAYER_OUTBOUND_IPPACKET_V4_DISCARD / FWPM_LAYER_OUTBOUND_IPPACKET_V6 / FWPM_LAYER_OUTBOUND_IPPACKET_V6_DISCARD
- FWPM_CONDITION_FLAGS
- FWPM_CONDITION_INTERFACE_INDEX
- FWPM_CONDITION_INTERFACE_TYPE
- FWPM_CONDITION_IP_LOCAL_ADDRESS
- FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
- FWPM_CONDITION_IP_LOCAL_INTERFACE
- FWPM_CONDITION_IP_REMOTE_ADDRESS
- FWPM_CONDITION_SUB_INTERFACE_INDEX
- FWPM_CONDITION_TUNNEL_TYPE
Windows 10 and later
- FWPM_CONDITION_COMPARTMENT_ID
FWPM_LAYER_IPFORWARD_V4 / FWPM_LAYER_IPFORWARD_V4_DISCARD / FWPM_LAYER_IPFORWARD_V6 / FWPM_LAYER_IPFORWARD_V6_DISCARD
- FWPM_CONDITION_FLAGS
- FWPM_CONDITION_DESTINATION_INTERFACE_INDEX
- FWPM_CONDITION_DESTINATION_SUB_INTERFACE_INDEX
- FWPM_CONDITION_IP_DESTINATION_ADDRESS
- FWPM_CONDITION_IP_DESTINATION_ADDRESS_TYPE
- FWPM_CONDITION_IP_FORWARD_INTERFACE
- FWPM_CONDITION_IP_LOCAL_INTERFACE
- FWPM_CONDITION_IP_SOURCE_ADDRESS
- FWPM_CONDITION_SOURCE_INTERFACE_INDEX
- FWPM_CONDITION_SOURCE_SUB_INTERFACE_INDEX
Windows 7 and later
- FWPM_CONDITION_IP_PHYSICAL_ARRIVAL_INTERFACE
- FWPM_CONDITION_IP_PHYSICAL_NEXTHOP_INTERFACE
- FWPM_CONDITION_ARRIVAL_INTERFACE_PROFILE_ID
- FWPM_CONDITION_NEXTHOP_INTERFACE_PROFILE_ID
Windows 10 and later
- FWPM_CONDITION_COMPARTMENT_ID
FWPM_LAYER_INBOUND_TRANSPORT_V4 / FWPM_LAYER_INBOUND_TRANSPORT_V4_DISCARD / FWPM_LAYER_INBOUND_TRANSPORT_V6 / FWPM_LAYER_INBOUND_TRANSPORT_V6_DISCARD
- FWPM_CONDITION_FLAGS
- FWPM_CONDITION_INTERFACE_INDEX
- FWPM_CONDITION_INTERFACE_TYPE
- FWPM_CONDITION_IP_LOCAL_ADDRESS
- FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
- FWPM_CONDITION_IP_LOCAL_INTERFACE
- FWPM_CONDITION_IP_LOCAL_PORT
- FWPM_CONDITION_IP_PROTOCOL
- FWPM_CONDITION_IP_REMOTE_ADDRESS
- FWPM_CONDITION_IP_REMOTE_PORT
- FWPM_CONDITION_SUB_INTERFACE_INDEX
- FWPM_CONDITION_TUNNEL_TYPE
Windows 7 and later
- FWPM_CONDITION_CURRENT_PROFILE_ID
Windows 10 and later
- FWPM_CONDITION_IPSEC_SECURITY_REALM_ID
- FWPM_CONDITION_COMPARTMENT_ID
FWPM_LAYER_OUTBOUND_TRANSPORT_V4 / FWPM_LAYER_OUTBOUND_TRANSPORT_V4_DISCARD / FWPM_LAYER_OUTBOUND_TRANSPORT_V6 / FWPM_LAYER_OUTBOUND_TRANSPORT_V6_DISCARD
- FWPM_CONDITION_FLAGS
- FWPM_CONDITION_INTERFACE_INDEX
- FWPM_CONDITION_INTERFACE_TYPE
- FWPM_CONDITION_IP_DESTINATION_ADDRESS_TYPE
- FWPM_CONDITION_IP_LOCAL_ADDRESS
- FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
- FWPM_CONDITION_IP_LOCAL_INTERFACE
- FWPM_CONDITION_IP_LOCAL_PORT
- FWPM_CONDITION_IP_PROTOCOL
- FWPM_CONDITION_IP_REMOTE_ADDRESS
- FWPM_CONDITION_IP_REMOTE_PORT
- FWPM_CONDITION_SUB_INTERFACE_INDEX
- FWPM_CONDITION_TUNNEL_TYPE
Windows 7 and later
- FWPM_CONDITION_CURRENT_PROFILE_ID
Windows 10 and later
- FWPM_CONDITION_IPSEC_SECURITY_REALM_ID
- FWPM_CONDITION_COMPARTMENT_ID
FWPM_LAYER_STREAM_V4 / FWPM_LAYER_STREAM_V4_DISCARD / FWPM_LAYER_STREAM_V6 / FWPM_LAYER_STREAM_V6_DISCARD
- FWPM_CONDITION_DIRECTION
- FWPM_CONDITION_FLAGS
- FWPM_CONDITION_IP_LOCAL_ADDRESS
- FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
- FWPM_CONDITION_IP_LOCAL_PORT
- FWPM_CONDITION_IP_REMOTE_ADDRESS
- FWPM_CONDITION_IP_REMOTE_PORT
Windows 10 and later
- FWPM_CONDITION_COMPARTMENT_ID
FWPM_LAYER_DATAGRAM_DATA_V4 / FWPM_LAYER_DATAGRAM_DATA_V4_DISCARD / FWPM_LAYER_DATAGRAM_DATA_V6 / FWPM_LAYER_DATAGRAM_DATA_V6_DISCARD
- FWPM_CONDITION_DIRECTION
- FWPM_CONDITION_FLAGS
- FWPM_CONDITION_INTERFACE_INDEX
- FWPM_CONDITION_INTERFACE_TYPE
- FWPM_CONDITION_IP_LOCAL_ADDRESS
- FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
- FWPM_CONDITION_IP_LOCAL_INTERFACE
- FWPM_CONDITION_IP_LOCAL_PORT
- FWPM_CONDITION_IP_PROTOCOL
- FWPM_CONDITION_IP_REMOTE_ADDRESS
- FWPM_CONDITION_IP_REMOTE_PORT
- FWPM_CONDITION_SUB_INTERFACE_INDEX
- FWPM_CONDITION_TUNNEL_TYPE
Windows 10 and later
- FWPM_CONDITION_COMPARTMENT_ID
FWPM_LAYER_STREAM_PACKET V4 / FWPM_LAYER_STREAM_PACKET V6
Windows 7 and later
- FWPM_CONDITION_DIRECTION
- FWPM_CONDITION_FLAGS
- FWPM_CONDITION_INTERFACE_INDEX
- FWPM_CONDITION_INTERFACE_TYPE
- FWPM_CONDITION_IP_LOCAL_ADDRESS
- FWPM_CONDITION_IP_LOCAL_INTERFACE
- FWPM_CONDITION_IP_LOCAL_PORT
- FWPM_CONDITION_IP_REMOTE_ADDRESS
- FWPM_CONDITION_IP_REMOTE_PORT
- FWPM_CONDITION_SUB_INTERFACE_INDEX
- FWPM_CONDITION_TUNNEL_TYPE
Windows 10 and later
- FWPM_CONDITION_COMPARTMENT_ID
FWPM_LAYER_INBOUND_ICMP_ERROR_V4 / FWPM_LAYER_INBOUND_ICMP_ERROR_V4_DISCARD / FWPM_LAYER_INBOUND_ICMP_ERROR_V6 / FWPM_LAYER_INBOUND_ICMP_ERROR_V6_DISCARD
- FWPM_CONDITION_ARRIVAL_INTERFACE_INDEX
- FWPM_CONDITION_ARRIVAL_INTERFACE_TYPE
- FWPM_CONDITION_ARRIVAL_SUB_INTERFACE_INDEX Windows Vista / Windows 7: FWPM_CONDITION_SUB_INTERFACE_INDEX
- FWPM_CONDITION_ARRIVAL_TUNNEL_TYPE
- FWPM_CONDITION_FLAGS
- FWPM_CONDITION_ICMP_CODE
- FWPM_CONDITION_ICMP_TYPE
- FWPM_CONDITION_EMBEDDED_LOCAL_ADDRESS_TYPE
- FWPM_CONDITION_EMBEDDED_LOCAL_PORT
- FWPM_CONDITION_EMBEDDED_PROTOCOL
- FWPM_CONDITION_EMBEDDED_REMOTE_ADDRESS
- FWPM_CONDITION_EMBEDDED_REMOTE_PORT
- FWPM_CONDITION_IP_ARRIVAL_INTERFACE
- FWPM_CONDITION_IP_LOCAL_ADDRESS
- FWPM_CONDITION_IP_LOCAL_INTERFACE
- FWPM_CONDITION_IP_REMOTE_ADDRESS
- FWPM_CONDITION_LOCAL_INTERFACE_INDEX Windows Vista / Windows 7: FWPM_CONDITION_INTERFACE_INDEX
- FWPM_CONDITION_LOCAL_INTERFACE_TYPE Windows Vista / Windows 7: FWPM_CONDITION_INTERFACE_TYPE
- FWPM_CONDITION_LOCAL_TUNNEL_TYPE Windows Vista / Windows 7: FWPM_CONDITION_TUNNEL_TYPE
Windows 7 and later
- FWPM_CONDITION_ARRIVAL_INTERFACE_PROFILE_ID
- FWPM_CONDITION_INTERFACE_QUARANTINE_EPOCH
Windows 10 and later
- FWPM_CONDITION_COMPARTMENT_ID
FWPM_LAYER_OUTBOUND_ICMP_ERROR_V4 / FWPM_LAYER_OUTBOUND_ICMP_ERROR_V4_DISCARD / FWPM_LAYER_OUTBOUND_ICMP_ERROR_V6 / FWPM_LAYER_OUTBOUND_ICMP_ERROR_V6_DISCARD
- FWPM_CONDITION_FLAGS
- FWPM_CONDITION_ICMP_CODE
- FWPM_CONDITION_ICMP_TYPE
- FWPM_CONDITION_INTERFACE_INDEX
- FWPM_CONDITION_INTERFACE_TYPE
- FWPM_CONDITION_IP_LOCAL_ADDRESS
- FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
- FWPM_CONDITION_IP_LOCAL_INTERFACE
- FWPM_CONDITION_IP_REMOTE_ADDRESS
- FWPM_CONDITION_SUB_INTERFACE_INDEX
- FWPM_CONDITION_TUNNEL_TYPE
Windows 7 and later
- FWPM_CONDITION_NEXTHOP_INTERFACE_PROFILE_ID
- FWPM_CONDITION_INTERFACE_QUARANTINE_EPOCH
Windows 10 and later
- FWPM_CONDITION_COMPARTMENT_ID
FWPM_LAYER_ALE_BIND_REDIRECT_V4 / FWPM_LAYER_ALE_BIND_REDIRECT V6
- FWPM_CONDITION_ALE_PACKAGE_FAMILY_NAME
Windows 7 and later
- FWPM_CONDITION_ALE_APP_ID
- FWPM_CONDITION_ALE_USER_ID
- FWPM_CONDITION_FLAGS
- FWPM_CONDITION_IP_LOCAL_ADDRESS
- FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
- FWPM_CONDITION_IP_LOCAL_PORT
- FWPM_CONDITION_IP_PROTOCOL
Windows 8 and later
- FWPM_CONDITION_ALE_PACKAGE_ID
Windows 10 and later
- FWPM_CONDITION_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE
- FWPM_CONDITION_COMPARTMENT_ID
FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4 / FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V4_DISCARD / FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6 / FWPM_LAYER_ALE_RESOURCE_ASSIGNMENT_V6_DISCARD
- FWPM_CONDITION_ALE_APP_ID
- FWPM_CONDITION_ALE_PROMISCUOUS_MODE
- FWPM_CONDITION_ALE_USER_ID
- FWPM_CONDITION_FLAGS
- FWPM_CONDITION_INTERFACE_TYPE
- FWPM_CONDITION_IP_LOCAL_ADDRESS
- FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
- FWPM_CONDITION_IP_LOCAL_INTERFACE
- FWPM_CONDITION_IP_LOCAL_PORT
- FWPM_CONDITION_IP_PROTOCOL
- FWPM_CONDITION_TUNNEL_TYPE
- FWPM_CONDITION_ALE_PACKAGE_FAMILY_NAME
Windows 7 and later
- FWPM_CONDITION_LOCAL_INTERFACE_PROFILE_ID
- FWPM_CONDITION_ALE_SIO_FIREWALL_SYSTEM_PORT
- FWPM_CONDITION_ALE_SIO_FIREWALL_SOCKET_PROPERTY
Windows 8 and later
- FWPM_CONDITION_ALE_PACKAGE_ID
Windows 10 and later
- FWPM_CONDITION_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE
- FWPM_CONDITION_COMPARTMENT_ID
FWPM_LAYER_ALE_RESOURCE_RELEASE_V4 / FWPM_LAYER_ALE_RESOURCE_RELEASE_V6
- FWPM_CONDITION_ALE_PACKAGE_FAMILY_NAME
Windows 7 and later
- FWPM_CONDITION_ALE_APP_ID
- FWPM_CONDITION_ALE_USER_ID
- FWPM_CONDITION_FLAGS
- FWPM_CONDITION_IP_LOCAL_ADDRESS
- FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
- FWPM_CONDITION_IP_LOCAL_INTERFACE
- FWPM_CONDITION_IP_LOCAL_PORT
- FWPM_CONDITION_IP_PROTOCOL
Windows 8 and later
- FWPM_CONDITION_ALE_PACKAGE_ID
Windows 10 and later
- FWPM_CONDITION_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE
- FWPM_CONDITION_COMPARTMENT_ID
FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V4 / FWPM_LAYER_ALE_ENDPOINT_CLOSURE_V6
- FWPM_CONDITION_ALE_PACKAGE_FAMILY_NAME
Windows 7 and later
- FWPM_CONDITION_ALE_APP_ID
- FWPM_CONDITION_ALE_USER_ID
- FWPM_CONDITION_FLAGS
- FWPM_CONDITION_IP_LOCAL_ADDRESS
- FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
- FWPM_CONDITION_IP_LOCAL_INTERFACE
- FWPM_CONDITION_IP_LOCAL_PORT
- FWPM_CONDITION_IP_PROTOCOL
- FWPM_CONDITION_IP_REMOTE_ADDRESS
- FWPM_CONDITION_IP_REMOTE_PORT
Windows 8 and later
- FWPM_CONDITION_ALE_PACKAGE_ID
Windows 10 and later
- FWPM_CONDITION_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE
- FWPM_CONDITION_COMPARTMENT_ID
FWPM_LAYER_ALE_AUTH_LISTEN_V4 / FWPM_LAYER_ALE_AUTH_LISTEN_V4_DISCARD / FWPM_LAYER_ALE_AUTH_LISTEN_V6 / FWPM_LAYER_ALE_AUTH_LISTEN_V6_DISCARD
- FWPM_CONDITION_ALE_PACKAGE_FAMILY_NAME
- FWPM_CONDITION_ALE_APP_ID
- FWPM_CONDITION_ALE_USER_ID
- FWPM_CONDITION_FLAGS
- FWPM_CONDITION_INTERFACE_TYPE
- FWPM_CONDITION_IP_LOCAL_ADDRESS
- FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
- FWPM_CONDITION_IP_LOCAL_INTERFACE
- FWPM_CONDITION_IP_LOCAL_PORT
- FWPM_CONDITION_TUNNEL_TYPE
Windows 7 and later
- FWPM_CONDITION_LOCAL_INTERFACE_PROFILE_ID
- FWPM_CONDITION_ALE_SIO_FIREWALL_SYSTEM_PORT
- FWPM_CONDITION_ALE_SIO_FIREWALL_SOCKET_PROPERTY
Windows 8 and later
- FWPM_CONDITION_ALE_PACKAGE_ID
Windows 10 and later
- FWPM_CONDITION_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE
- FWPM_CONDITION_COMPARTMENT_ID
FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4 / FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V4_DISCARD / FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6 / FWPM_LAYER_ALE_AUTH_RECV_ACCEPT_V6_DISCARD
- FWPM_CONDITION_ALE_PACKAGE_FAMILY_NAME
- FWPM_CONDITION_ALE_APP_ID
- FWPM_CONDITION_ALE_NAP_CONTEXT
- FWPM_CONDITION_ALE_REMOTE_MACHINE_ID
- FWPM_CONDITION_ALE_REMOTE_USER_ID
- FWPM_CONDITION_ALE_SIO_FIREWALL_SYSTEM_PORT
- FWPM_CONDITION_ALE_USER_ID
- FWPM_CONDITION_ARRIVAL_INTERFACE_INDEX
- FWPM_CONDITION_ARRIVAL_INTERFACE_TYPE
- FWPM_CONDITION_ARRIVAL_SUB_INTERFACE_INDEX Windows Vista / Windows 7: FWPM_CONDITION_SUB_INTERFACE_INDEX
- FWPM_CONDITION_ARRIVAL_TUNNEL_TYPE
- FWPM_CONDITION_FLAGS
- FWPM_CONDITION_IP_ARRIVAL_INTERFACE
- FWPM_CONDITION_IP_LOCAL_ADDRESS
- FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
- FWPM_CONDITION_IP_LOCAL_INTERFACE
- FWPM_CONDITION_IP_LOCAL_PORT
- FWPM_CONDITION_IP_PROTOCOL
- FWPM_CONDITION_IP_REMOTE_ADDRESS
- FWPM_CONDITION_IP_REMOTE_PORT
- FWPM_CONDITION_LOCAL_INTERFACE_INDEX Windows Vista / Windows 7: FWPM_CONDITION_INTERFACE_INDEX
- FWPM_CONDITION_LOCAL_INTERFACE_TYPE Windows Vista / Windows 7: FWPM_CONDITION_INTERFACE_TYPE
- FWPM_CONDITION_LOCAL_TUNNEL_TYPE Windows Vista / Windows 7: FWPM_CONDITION_TUNNEL_TYPE
Windows 7 and later
- FWPM_CONDITION_NEXTHOP_SUB_INTERFACE_INDEX
- FWPM_CONDITION_IP_NEXTHOP_INTERFACE
- FWPM_CONDITION_NEXTHOP_INTERFACE_TYPE
- FWPM_CONDITION_NEXTHOP_TUNNEL_TYPE
- FWPM_CONDITION_NEXTHOP_INTERFACE_INDEX
- FWPM_CONDITION_ORIGINAL_PROFILE_ID
- FWPM_CONDITION_CURRENT_PROFILE_ID
- FWPM_CONDITION_REAUTHORIZE_REASON
- FWPM_CONDITION_ORIGINAL_ICMP_TYPE
- FWPM_CONDITION_INTERFACE_QUARANTINE_EPOCH
- FWPM_CONDITION_ALE_SIO_FIREWALL_SOCKET_PROPERTY
- FWPM_CONDITION_ALE_REAUTH_REASON
Windows 8 and later
- FWPM_CONDITION_ALE_PACKAGE_ID
Windows 10 and later
- FWPM_CONDITION_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE
- FWPM_CONDITION_COMPARTMENT_ID
FWPM_LAYER_ALE_CONNECT_REDIRECT_V4 / FWPM_LAYER_ALE_CONNECT_REDIRECT V6
- FWPM_CONDITION_ALE_PACKAGE_FAMILY_NAME
Windows 7 and later
- FWPM_CONDITION_ALE_APP_ID
- FWPM_CONDITION_ALE_USER_ID
- FWPM_CONDITION_FLAGS
- FWPM_CONDITION_IP_LOCAL_ADDRESS
- FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
- FWPM_CONDITION_IP_LOCAL_PORT
- FWPM_CONDITION_IP_PROTOCOL
- FWPM_CONDITION_IP_REMOTE_PORT
- FWPM_CONDITION_IP_REMOTE_ADDRESS
- FWPM_CONDITION_IP_DESTINATION_ADDRESS_TYPE
Windows 8 and later
- FWPM_CONDITION_ALE_PACKAGE_ID
- FWPM_CONDITION_ALE_ORIGINAL_APP_ID
Windows 10 and later
- FWPM_CONDITION_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE
- FWPM_CONDITION_COMPARTMENT_ID
FWPM_LAYER_ALE_AUTH_CONNECT_V4 / FWPM_LAYER_ALE_AUTH_CONNECT_V4_DISCARD / FWPM_LAYER_ALE_AUTH_CONNECT_V6 / FWPM_LAYER_ALE_AUTH_CONNECT_V6_DISCARD
- FWPM_CONDITION_ALE_EFFECTIVE_NAME
- FWPM_CONDITION_ALE_PACKAGE_FAMILY_NAME
- FWPM_CONDITION_ALE_APP_ID
- FWPM_CONDITION_ALE_REMOTE_MACHINE_ID
- FWPM_CONDITION_ALE_REMOTE_USER_ID
- FWPM_CONDITION_ALE_USER_ID
- FWPM_CONDITION_FLAGS
- FWPM_CONDITION_INTERFACE_TYPE
- FWPM_CONDITION_IP_DESTINATION_ADDRESS_TYPE
- FWPM_CONDITION_IP_LOCAL_ADDRESS
- FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
- FWPM_CONDITION_IP_LOCAL_INTERFACE
- FWPM_CONDITION_IP_LOCAL_PORT
- FWPM_CONDITION_IP_PROTOCOL
- FWPM_CONDITION_IP_REMOTE_ADDRESS
- FWPM_CONDITION_IP_REMOTE_PORT
- FWPM_CONDITION_SUB_INTERFACE_INDEX
- FWPM_CONDITION_TUNNEL_TYPE
- FWPM_CONDITION_IP_ARRIVAL_INTERFACE
- FWPM_CONDITION_ARRIVAL_INTERFACE_TYPE
- FWPM_CONDITION_ARRIVAL_TUNNEL_TYPE
- FWPM_CONDITION_ARRIVAL_INTERFACE_INDEX
Windows Vista SP1 and later
- FWPM_CONDITION_INTERFACE_INDEX
Windows 7 and later
- FWPM_CONDITION_NEXTHOP_SUB_INTERFACE_INDEX
- FWPM_CONDITION_IP_NEXTHOP_INTERFACE
- FWPM_CONDITION_NEXTHOP_INTERFACE_TYPE
- FWPM_CONDITION_NEXTHOP_TUNNEL_TYPE
- FWPM_CONDITION_NEXTHOP_INTERFACE_INDEX
- FWPM_CONDITION_ORIGINAL_PROFILE_ID
- FWPM_CONDITION_CURRENT_PROFILE_ID
- FWPM_CONDITION_REAUTHORIZE_REASON
- FWPM_CONDITION_PEER_NAME
- FWPM_CONDITION_ORIGINAL_ICMP_TYPE
- FWPM_CONDITION_INTERFACE_QUARANTINE_EPOCH
- FWPM_CONDITION_ALE_REAUTH_REASON
Windows 8 and later
- FWPM_CONDITION_ALE_PACKAGE_ID
- FWPM_CONDITION_ALE_ORIGINAL_APP_ID
Windows 10 and later
- FWPM_CONDITION_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE
- FWPM_CONDITION_COMPARTMENT_ID
FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4 / FWPM_LAYER_ALE_FLOW_ESTABLISHED_V4_DISCARD / FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6 / FWPM_LAYER_ALE_FLOW_ESTABLISHED_V6_DISCARD
- FWPM_CONDITION_ALE_PACKAGE_FAMILY_NAME
- FWPM_CONDITION_ALE_APP_ID
- FWPM_CONDITION_ALE_REMOTE_MACHINE_ID
- FWPM_CONDITION_ALE_REMOTE_USER_ID
- FWPM_CONDITION_ALE_USER_ID
- FWPM_CONDITION_DIRECTION
- FWPM_CONDITION_FLAGS
- FWPM_CONDITION_INTERFACE_TYPE
- FWPM_CONDITION_IP_DESTINATION_ADDRESS_TYPE
- FWPM_CONDITION_IP_LOCAL_ADDRESS
- FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
- FWPM_CONDITION_IP_LOCAL_INTERFACE
- FWPM_CONDITION_IP_LOCAL_PORT
- FWPM_CONDITION_IP_PROTOCOL
- FWPM_CONDITION_IP_REMOTE_ADDRESS
- FWPM_CONDITION_IP_REMOTE_PORT
- FWPM_CONDITION_TUNNEL_TYPE
Windows 8 and later
- FWPM_CONDITION_ALE_PACKAGE_ID
- FWPM_CONDITION_ALE_ORIGINAL_APP_ID
Windows 10 and later
- FWPM_CONDITION_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE
- FWPM_CONDITION_COMPARTMENT_ID
FWPM_LAYER_NAME_RESOLUTION_CACHE_V4 / FWPM_LAYER_NAME_RESOLUTION_CACHE_V6
Windows 7 and later
- FWPM_CONDITION_ALE_USER_ID
- FWPM_CONDITION_ALE_APP_ID
- FWPM_CONDITION_IP_REMOTE_ADDRESS
- FWPM_CONDITION_PEER_NAME
FWPM_LAYER_IPSEC_KM_DEMUX_V4 / FWPM_LAYER_IPSEC_KM_DEMUX_V6
- FWPM_CONDITION_IP_LOCAL_ADDRESS
- FWPM_CONDITION_IP_REMOTE_ADDRESS
Windows 10 and later
- FWPM_CONDITION_IPSEC_SECURITY_REALM_ID
FWPM_LAYER_IPSEC_V4 / FWPM_LAYER_IPSEC_V6
- FWPM_CONDITION_IP_LOCAL_ADDRESS
- FWPM_CONDITION_IP_LOCAL_PORT
- FWPM_CONDITION_IP_PROTOCOL
- FWPM_CONDITION_IP_REMOTE_ADDRESS
- FWPM_CONDITION_IP_REMOTE_PORT
Windows 7 and later
- FWPM_CONDITION_IP_LOCAL_INTERFACE
- FWPM_CONDITION_CURRENT_PROFILE_ID
Windows 10 and later
- FWPM_CONDITION_IPSEC_SECURITY_REALM_ID
FWPM_LAYER_IKEEXT_V4 / FWPM_LAYER_IKEEXT_V6
- FWPM_CONDITION_IP_LOCAL_ADDRESS
- FWPM_CONDITION_IP_REMOTE_ADDRESS
Windows 7 and later
- FWPM_CONDITION_IP_LOCAL_INTERFACE
- FWPM_CONDITION_CURRENT_PROFILE_ID
Windows 10 and later
- FWPM_CONDITION_IPSEC_SECURITY_REALM_ID
FWPM_LAYER_RPC_UM
- FWPM_CONDITION_DCOM_APP_ID
- FWPM_CONDITION_IMAGE_NAME
- FWPM_CONDITION_IP_LOCAL_ADDRESS_V4
- FWPM_CONDITION_IP_LOCAL_ADDRESS_V6
- FWPM_CONDITION_IP_LOCAL_PORT
- FWPM_CONDITION_IP_REMOTE_ADDRESS_V4
- FWPM_CONDITION_IP_REMOTE_ADDRESS_V6
- FWPM_CONDITION_PIPE
- FWPM_CONDITION_REMOTE_USER_TOKEN
- FWPM_CONDITION_RPC_AUTH_LEVEL
- FWPM_CONDITION_RPC_AUTH_TYPE
- FWPM_CONDITION_RPC_IF_FLAG
- FWPM_CONDITION_RPC_IF_UUID
- FWPM_CONDITION_RPC_IF_VERSION
- FWPM_CONDITION_RPC_PROTOCOL
- FWPM_CONDITION_SEC_ENCRYPT_ALGORITHM
- FWPM_CONDITION_SEC_KEY_SIZE
Windows 11 and later
- FWPM_CONDITION_RPC_OPNUM
FWPM_LAYER_RPC_EPMAP
FWPM_CONDITION_IP_LOCAL_ADDRESS_V4
FWPM_CONDITION_IP_LOCAL_ADDRESS_V6
FWPM_CONDITION_IP_LOCAL_PORT
FWPM_CONDITION_IP_REMOTE_ADDRESS_V4
FWPM_CONDITION_IP_REMOTE_ADDRESS_V6
FWPM_CONDITION_PIPE
FWPM_CONDITION_REMOTE_USER_TOKEN
FWPM_CONDITION_RPC_AUTH_LEVEL
FWPM_CONDITION_RPC_AUTH_TYPE
FWPM_CONDITION_RPC_IF_UUID
FWPM_CONDITION_RPC_IF_VERSION
FWPM_CONDITION_RPC_PROTOCOL
FWPM_CONDITION_SEC_ENCRYPT_ALGORITHM
FWPM_CONDITION_SEC_KEY_SIZE
FWPM_LAYER_RPC_EP_ADD
- FWPM_CONDITION_PROCESS_WITH_RPC_IF_UUID
- FWPM_CONDITION_RPC_EP_FLAGS
- FWPM_CONDITION_RPC_EP_VALUE
- FWPM_CONDITION_RPC_PROTOCOL
FWPM_LAYER_RPC_PROXY_CONN
- FWPM_CONDITION_CLIENT_CERT_KEY_LENGTH
- FWPM_CONDITION_CLIENT_CERT_OID
- FWPM_CONDITION_CLIENT_TOKEN
- FWPM_CONDITION_RPC_PROXY_AUTH_TYPE
- FWPM_CONDITION_RPC_SERVER_NAME
- FWPM_CONDITION_RPC_SERVER_PORT
FWPM_LAYER_RPC_PROXY_IF
- FWPM_CONDITION_CLIENT_CERT_KEY_LENGTH
- FWPM_CONDITION_CLIENT_CERT_OID
- FWPM_CONDITION_CLIENT_TOKEN
- FWPM_CONDITION_RPC_IF_UUID
- FWPM_CONDITION_RPC_IF_VERSION
- FWPM_CONDITION_RPC_PROXY_AUTH_TYPE
- FWPM_CONDITION_RPC_SERVER_NAME
- FWPM_CONDITION_RPC_SERVER_PORT
FWPM_LAYER_KM_AUTHORIZATION
- FWPM_CONDITION_KM_AUTH_NAP_CONTEXT
Windows 7 and later
- FWPM_CONDITION_REMOTE_ID
- FWPM_CONDITION_AUTHENTICATION_TYPE
- FWPM_CONDITION_KM_TYPE
- FWPM_CONDITION_KM_MODE
- FWPM_CONDITION_DIRECTION
- FWPM_CONDITION_IPSEC_POLICY_KEY
FWPM_LAYER_INBOUND_MAC_FRAME_ETHERNET / FWPM_LAYER_OUTBOUND_MAC_FRAME_ETHERNET
Windows 8 and later
- FWPM_CONDITION_INTERFACE_MAC_ADDRESS
- FWPM_CONDITION_MAC_LOCAL_ADDRESS
- FWPM_CONDITION_MAC_REMOTE_ADDRESS
- FWPM_CONDITION_MAC_LOCAL_ADDRESS_TYPE
- FWPM_CONDITION_MAC_REMOTE_ADDRESS_TYPE
- FWPM_CONDITION_ETHER_TYPE
- FWPM_CONDITION_VLAN_ID
- FWPM_CONDITION_INTERFACE
- FWPM_CONDITION_INTERFACE_INDEX
- FWPM_CONDITION_NDIS_PORT
- FWPM_CONDITION_L2_FLAGS
Windows 10 and later
- FWPM_CONDITION_COMPARTMENT_ID
FWPM_LAYER_INBOUND_MAC_FRAME_NATIVE / FWPM_LAYER_OUTBOUND_MAC_FRAME_NATIVE
Windows 8 and later
- FWPM_CONDITION_NDIS_MEDIA_TYPE
- FWPM_CONDITION_NDIS_PHYSICAL_MEDIA_TYPE
- FWPM_CONDITION_INTERFACE
- FWPM_CONDITION_INTERFACE_TYPE
- FWPM_CONDITION_INTERFACE_INDEX
- FWPM_CONDITION_NDIS_PORT
- FWPM_CONDITION_L2_FLAGS
Windows 10 and later
- FWPM_CONDITION_COMPARTMENT_ID
FWPM_LAYER_EGRESS_VSWITCH_ETHERNET / FWPM_LAYER_INGRESS_VSWITCH_ETHERNET
- FWPM_CONDITION_VSWITCH_DESTINATION_VM_ID
Windows 8 and later
- FWPM_CONDITION_MAC_SOURCE_ADDRESS
- FWPM_CONDITION_MAC_SOURCE_ADDRESS_TYPE
- FWPM_CONDITION_MAC_DESTINATION_ADDRESS
- FWPM_CONDITION_MAC_DESTINATION_ADDRESS_TYPE
- FWPM_CONDITION_ETHER_TYPE
- FWPM_CONDITION_VLAN_ID
- FWPM_CONDITION_VSWITCH_TENANT_NETWORK_ID
- FWPM_CONDITION_VSWITCH_ID
- FWPM_CONDITION_VSWITCH_NETWORK_TYPE
- FWPM_CONDITION_VSWITCH_SOURCE_INTERFACE_ID
- FWPM_CONDITION_VSWITCH_SOURCE_INTERFACE_TYPE
- FWPM_CONDITION_VSWITCH_SOURCE_VM_ID
- FWPM_CONDITION_VSWITCH_L2_FLAGS
Windows 10 and later
- FWPM_CONDITION_COMPARTMENT_ID
FWPM_LAYER_EGRESS_VSWITCH_TRANSPORT_V4 / FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V4 / FWPM_LAYER_EGRESSVSWITCH_TRANSPORT_V6 / FWPM_LAYER_INGRESS_VSWITCH_TRANSPORT_V6
- FWPM_CONDITION_VSWITCH_DESTINATION_VM_ID
Windows 8 and later
- FWPM_CONDITION_IP_SOURCE_ADDRESS
- FWPM_CONDITION_IP_DESTINATION_ADDRESS
- FWPM_CONDITION_IP_PROTOCOL
- FWPM_CONDITION_IP_SOURCE_PORT
- FWPM_CONDITION_IP_DESTINATION_PORT
- FWPM_CONDITION_VLAN_ID
- FWPM_CONDITION_VSWITCH_TENANT_NETWORK_ID
- FWPM_CONDITION_VSWITCH_ID
- FWPM_CONDITION_VSWITCH_NETWORK_TYPE
- FWPM_CONDITION_VSWITCH_SOURCE_INTERFACE_ID
- FWPM_CONDITION_VSWITCH_SOURCE_INTERFACE_TYPE
- FWPM_CONDITION_VSWITCH_SOURCE_VM_ID
- FWPM_CONDITION_VSWITCH_DESTINATION_INTERFACE_ID
- FWPM_CONDITION_VSWITCH_DESTINATION_INTERFACE_TYPE
- FWPM_CONDITION_VSWITCH_L2_FLAGS
Windows 10 and later
- FWPM_CONDITION_COMPARTMENT_ID
FWPM_LAYER_ OUTBOUND_NETWORK_CONNECTION_POLICY_V4 / FWPM_LAYER_ OUTBOUND_NETWORK_CONNECTION_POLICY_V6
- FWPM_CONDITION_ALE_APP_ID
- FWPM_CONDITION_ALE_USER_ID
- FWPM_CONDITION_IP_LOCAL_ADDRESS
- FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE
- FWPM_CONDITION_IP_LOCAL_PORT
- FWPM_CONDITION_IP_PROTOCOL
- FWPM_CONDITION_IP_REMOTE_ADDRESS
- FWPM_CONDITION_IP_DESTINATION_ADDRESS_TYPE
- FWPM_CONDITION_IP_REMOTE_PORT
- FWPM_CONDITION_FLAGS
- FWPM_CONDITION_ALE_ORIGINAL_APP_ID
- FWPM_CONDITION_ALE_PACKAGE_ID
- FWPM_CONDITION_ALE_SECURITY_ATTRIBUTE_FQBN_VALUE
- FWPM_CONDITION_COMPARTMENT_ID
Remarks
The V4 and V6 suffixes at the end of the layer identifiers indicate whether the layer is located in the IPv4 network stack or in the IPv6 network stack.
Requirements
| Requirement | Value |
|---|---|
| Minimum supported client |
Windows Vista [desktop apps only] |
| Minimum supported server |
Windows Server 2008 [desktop apps only] |
| Header |
|