5153(S): A more restrictive Windows Filtering Platform filter has blocked a packet.

This event is logged if a more restrictive Windows Filtering Platform filter has blocked a packet.

There is no example of this event in this document.

Subcategory: Audit Filtering Platform Packet Drop

Event Schema:

A more restrictive Windows Filtering Platform filter has blocked a packet.

Application Information:

Process ID:%1

Application Name:%2

Network Information:

Source Address:%3

Source Port:%4

Protocol:%5

Filter Information:

Filter Run-Time ID:%6

Layer Name:%7

Layer Run-Time ID:%8

Required Server Roles: None.

Minimum OS Version: Windows Server 2008, Windows Vista.

Event Versions: 0.

Security Monitoring Recommendations