5157: The Windows Filtering Platform has blocked a connection
On this page
This event documents each time WFP allows a program to connect to another process (on the same or a remote computer) on a TCP or UDP port. The above example is of WFP allowing the DNS Server service to connect to the DNS client on the same computer.
The Windows Filtering Platform has blocked a connection.
Application Information:
Process ID: 1224 Application Name: \device\harddiskvolume1\windows\system32\svchost.exe
Network Information:
Direction: Inbound Source Address: 224.0.0.252 Source Port: 5355 Destination Address: 10.45.45.102 Destination Port: 56927 Protocol: 17
Filter Information:
Filter Run-Time ID: 0 Layer Name: Receive/Accept Layer Run-Time ID: 44
Top 10 Windows Security Events to Monitor
Free Tool for Windows Event Collection
Go To Event ID: Must be a 1-5 digit number No such event ID
Security Log Quick Reference Chart Download now!