5150(-): The Windows Filtering Platform blocked a packet.
This event is logged if the Windows Filtering Platform MAC filter blocked a packet.
There is no example of this event in this document.
Subcategory: Audit Filtering Platform Connection
Event Schema:
The Windows Filtering Platform has blocked a packet.
Network Information:
Direction:%1
Source Address:%2
Destination Address:%3
EtherType:%4
MediaType:%5
InterfaceType:%6
VlanTag:%7
Filter Information:
Filter Run-Time ID:%8
Layer Name:%9
Layer Run-Time ID:%10
Required Server Roles: None.
Minimum OS Version: Windows Server 2012, Windows 8.
Event Versions: 0.
Security Monitoring Recommendations
- There is no recommendation for this event in this document.