How to identify the firewall filter based on ID

Bronze Contributor

Hi,

We started to have strange problem and looks like Windows Firewall start blocking traffic even there is rules for the traffic.

 

When I run the command

 

 

netsh wfp show netevents

 

 

I found from the XML file what this generates the following drop related to my traffic:

<item>
<filterId>1910059</filterId>
<subLayer>FWPP_SUBLAYER_INTERNAL_FIREWALL_WF</subLayer>
<actionType>FWP_ACTION_BLOCK</actionType>
</item>
 
Anybody knows how to identify what is this filter?

 

0 Replies