Event ID 5157
The Windows Filtering Platform has blocked a connection.The Windows Filtering Platform has blocked a connection.
Application Information:
Process ID: %1
Application Name: %2
Network Information:
Direction: %3
Source Address: %4
Source Port: %5
Destination Address: %6
Destination Port: %7
Protocol: %8
Filter Information:
Filter Run-Time ID: %9
Layer Name: %10
Layer Run-Time ID: %11| Name | Field | Insertion String | OS | Example | ||
|---|---|---|---|---|---|---|
| Direction | Direction | %3 | Any | Inbound | ||
| Protocol | Protocol | %8 | Any | View Codes | ||
Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /subcategory:"Filtering Platform Connection"
LEFT/RIGHT arrow keys for navigation
Back to List