---
title: 5153(S) A more restrictive Windows Filtering Platform filter has blocked a packet. (Windows 10)
description: Describes security event 5153(S) A more restrictive Windows Filtering Platform filter has blocked a packet.
ms.pagetype: security
ms.prod: w10
ms.mktglfcycl: deploy
ms.sitesec: library
author: Mir0sh
---

# 5153(S): A more restrictive Windows Filtering Platform filter has blocked a packet.

**Applies to**
-   Windows 10
-   Windows Server 2016


This event is logged if a more restrictive Windows Filtering Platform filter has blocked a packet.

There is no example of this event in this document.

***Subcategory:*** [Audit Filtering Platform Packet Drop](audit-filtering-platform-packet-drop.md)

***Event Schema:***

*A more restrictive Windows Filtering Platform filter has blocked a packet.*

*Application Information:*

> *Process ID:%1*
>
> *Application Name:%2*

*Network Information:*

> *Source Address:%3*
>
> *Source Port:%4*
>
> *Protocol:%5*

*Filter Information:*

> *Filter Run-Time ID:%6*
>
> *Layer Name:%7*
>
> *Layer Run-Time ID:%8*

***Required Server Roles:*** None.

***Minimum OS Version:*** Windows Server 2008, Windows Vista.

***Event Versions:*** 0.

## Security Monitoring Recommendations

-   There is no recommendation for this event in this document.