Windows Filtering Platform quick FAQ

What is WFP?

https://docs.microsoft.com/en-us/windows/desktop/fwp/windows-filtering-platform-start-page

What for?

The main thing is that default Windows Firewall could be not really trustworthy (just like the hosts file) for those, who cares about privacy. You may use third-party firewall for manual management or WPD's solution for "one click block".

Why WFP button is not available?

Using WFP means that default Windows Firewall supposed to be disabled. Until then WFP is useless. The reason for this, that Windows Firewall has top priority than any other firewall - that's why third-party firewalls asks to disable it first. So, if you want continue using Windows Firewall (or copy rules in a third-party firewall), there is no reason to enable WFP.

How can I check it in system?

Run cmd as an administrator.

1. netsh
2. wfp
3. show filters

filters.xml will be generated in C:\Windows\System32

Additional tech info?

Yes.

1. Session Name = "Blocker_Session"
2. Provider Name = "Blocker_Provider"
3. Sublayer Name = "Blocker_Sublayer"
4. Provider Guid = "63149747-59ed-4bcb-9418-766be3176ec8"
5. Sublayer Guid = "23e52518-2147-4cd7-b603-376abbd8f179"
6. Telemetry Filter Guid = "e06b9e1c-78be-4eff-93c5-d32495898fc8"
7. Extra Filter Guid = "af52428a-3db3-444d-b3ea-b6f49ebade87"
8. Update Filter Guid = "828a4bca-3823-4d55-8740-58016c0090a3"