mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-06-23 22:33:41 +00:00
60 lines
1.3 KiB
Markdown
60 lines
1.3 KiB
Markdown
---
|
|
title: 5153(S) A more restrictive Windows Filtering Platform filter has blocked a packet. (Windows 10)
|
|
description: Describes security event 5153(S) A more restrictive Windows Filtering Platform filter has blocked a packet.
|
|
ms.pagetype: security
|
|
ms.prod: w10
|
|
ms.mktglfcycl: deploy
|
|
ms.sitesec: library
|
|
author: Mir0sh
|
|
---
|
|
|
|
# 5153(S): A more restrictive Windows Filtering Platform filter has blocked a packet.
|
|
|
|
**Applies to**
|
|
- Windows 10
|
|
- Windows Server 2016
|
|
|
|
|
|
This event is logged if a more restrictive Windows Filtering Platform filter has blocked a packet.
|
|
|
|
There is no example of this event in this document.
|
|
|
|
***Subcategory:*** [Audit Filtering Platform Packet Drop](audit-filtering-platform-packet-drop.md)
|
|
|
|
***Event Schema:***
|
|
|
|
*A more restrictive Windows Filtering Platform filter has blocked a packet.*
|
|
|
|
*Application Information:*
|
|
|
|
> *Process ID:%1*
|
|
>
|
|
> *Application Name:%2*
|
|
|
|
*Network Information:*
|
|
|
|
> *Source Address:%3*
|
|
>
|
|
> *Source Port:%4*
|
|
>
|
|
> *Protocol:%5*
|
|
|
|
*Filter Information:*
|
|
|
|
> *Filter Run-Time ID:%6*
|
|
>
|
|
> *Layer Name:%7*
|
|
>
|
|
> *Layer Run-Time ID:%8*
|
|
|
|
***Required Server Roles:*** None.
|
|
|
|
***Minimum OS Version:*** Windows Server 2008, Windows Vista.
|
|
|
|
***Event Versions:*** 0.
|
|
|
|
## Security Monitoring Recommendations
|
|
|
|
- There is no recommendation for this event in this document.
|
|
|