Event ID 4953

Windows Firewall ignored a rule because it could not be parsed

Windows Firewall ignored a rule because it could not be parsed.

Profile:              %1

Reason for Rejection: %2

Rule:
    ID:   %3
    Name: %4

This event generates if Windows Firewall was not able to parse Windows Firewall rule for some reason.

It can happen if a Windows Firewall rule registry entry was corrupted, or from misconfigured Group Policy settings.

Auditing: Always

Usually indicates a configuration issue, not a security issue.

Volume: Low

Microsoft Documentation

Event ID - 4953

	Field	Insertion String	OS	Example
Profile	Profile	%1	Any	All
Reason for Rejection	ReasonForRejection	%2	Any	An error occurred.
ID	RuleId	%3	Any	SearchProtocolHost-2
Name	RuleName	%4	Any	-


  C:\> AuditPol.exe /get  /subcategory:"MPSSVC Rule-Level Policy Change"

Policy Change

LEFT/RIGHT arrow keys for navigation