What is windows base filtering engine

About Windows Filtering Platform

Windows Filtering Platform (WFP) is a network traffic processing platform designed to replace the Windows XP and Windows Server 2003 network traffic filtering interfaces. WFP consists of a set of hooks into the network stack and a filtering engine that coordinates network stack interactions.

The WFP components

Filter Engine

The core multi-layer filtering infrastructure, hosted in both kernel-mode and user-mode, that replaces the multiple filtering modules in the Windows XP and Windows Server 2003 networking subsystem.

  • Filters network traffic at any layer in the system over any data fields that a shim can provide.
  • Implements the «Callout» filters by invoking callouts during classification.
  • Returns «Permit» or «Block» actions to the shim that invoked it for enforcement.
  • Provides arbitration between different policy sources. For example, determines priority when an application is configured to secure any network traffic related to it, but the local firewall is configured to prevent application secured traffic.

Base Filtering Engine (BFE)

A service that controls the operation of the Windows Filtering Platform. It performs the following tasks.

  • Accepts filters and other configuration settings for the platform.
  • Reports the current state of the system, including statistics.
  • Enforces the security model for accepting configuration in the platform. For example, a local administrator can add filters but other users can only view them.
  • Plumbs configuration settings to other modules in the system. For example, IPsec negotiation polices go to IKE/AuthIP keying modules, filters go to the filter engine.

Shims

Kernel-mode components that reside between the Network Stack and the filter engine. Shims make the filtering decision by classifying against the filter engine. Following is a list of available shims.

  • Application Layer Enforcement (ALE) shim.
  • Transport Layer Module shim.
  • Network Layer Module shim.
  • Internet Control Message Protocol (ICMP) Error shim.
  • Discard shim.
  • Stream shim.

Callouts

Set of functions exposed by a driver and used for specialized filtering. Besides the basic actions of «Permit» and «Block», callouts can modify and secure inbound and outbound network traffic. See the Windows Filtering Platform Callout Drivers topic in the Windows Driver Kit (WDK) documentation for more information on callouts. WFP provides built-in callouts that accomplish the following tasks.

  • Perform IPsec processing.
  • Adjust stateful filtering behavior.
  • Perform stealth mode filtering (silent drop of packets that were not requested).
  • Control TCP chimney offload.
  • Interact with the Teredo service.

The filter engine allows third-party callouts to register at each of its kernel-mode layers.

Application Programming Interface

A set of data types and functions available to the developers to build and manage network filtering applications. These data types and functions are grouped into multiple API sets.

What is base filtering engine windows 7

What is base filtering engine windows 7

The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.

Читайте также:  Все для asus k52dr windows

This service also exists in Windows 10, 8 and Vista.

Startup Type

Windows 7 edition without SP SP1
Starter Automatic Automatic
Home Basic Automatic Automatic
Home Premium Automatic Automatic
Professional Automatic Automatic
Ultimate Automatic Automatic
Enterprise Automatic Automatic

Default Properties

Display name: Base Filtering Engine
Service name: BFE
Type: share
Path: %WinDir%\system32\svchost.exe -k LocalServiceNoNetwork
File: %WinDir%\System32\bfe.dll
Error control: normal
Group: NetworkProvider
Object: NT AUTHORITY\LocalService
Privileges:
  • SeAuditPrivilege

Default Behavior

The Base Filtering Engine service runs as NT AUTHORITY\LocalService in a shared process. It shares an executable file with other services. If the Base Filtering Engine fails to load or initialize, the error is recorded into the Event Log. Windows 7 startup should proceed, but a message box is displayed informing you that the BFE service has failed to start.

Dependencies

Base Filtering Engine will not start, if the Remote Procedure Call (RPC) service is stopped or disabled.

If the Base Filtering Engine is stopped, the following services will not start and initialize:

Restore Default Startup Type for Base Filtering Engine

Automated Restore

1. Select your Windows 7 edition and Service Pack, and then click on the Download button below.

2. Save the RestoreBaseFilteringEngineWindows7.bat file to any folder on your hard drive.

3. Right-click the downloaded batch file and select Run as administrator.

Base Filtering Engine

General Information

Base Filtering Engine is needed for some functions (HTTP scanning) of ESET NOD32 Antivirtus, and it will complain about it not being available if it is disabled. This service is also needed for proper functionality of ZoneAlarm v9.2.x (free).

Windows 8

Default Description

The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.

Additional Information

Default Startup Type

OS SP0
Windows 8 x86 Automatic (Started)
Windows 8 x64 Automatic (Started)
Windows 8 Pro x86 Automatic (Started)
Windows 8 Pro x64 Automatic (Started)
Windows 8 Enterprise x86 Automatic (Started)
Windows 8 Enterprise x64 Automatic (Started)

Service Names

Service Name (registry): BFE
Display Name: Base Filtering Engine

Default Path and Command Line Options

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

Log On As

Dependencies

Note: No dependencies are listed for any service in the WDP build I used to draft this information.

Windows 7

Default Description

The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.

Additional Information

If you use an external hardware firewall/gateway/router between your computer and the internet, do not use IPsec (VPN tunneling, etc) and Internet Connection Sharing (ICS), then this service and the following group of services can be disabled:

I highly recommend that you do not disable the Windows Firewall unless you use a different software firewall or external hardware solution, but the services listed above are all involved with each other.

Default Startup Type

OS SP0 SP1
Windows 7 Starter Automatic (Started) Automatic (Started)
Windows 7 Home Basic Automatic (Started) Automatic (Started)
Windows 7 Home Premium Automatic (Started) Automatic (Started)
Windows 7 Professional Automatic (Started) Automatic (Started)
Windows 7 Ultimate Automatic (Started) Automatic (Started)
Windows 7 Enterprise Automatic (Started) Automatic (Started)

Service Names

Service Name (registry): BFE
Display Name: Base Filtering Engine

Default Path and Command Line Options

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

Log On As

Dependencies

What service Base Filtering Engine needs to function properly:

What other service require Base Filtering Engine to function properly:

Windows Vista

Default Description

The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.

Читайте также:  Hp 1102 драйвер astra linux

Additional Information

If you use an external hardware firewall/gateway/router between your computer and the internet, do not use IPsec (VPN tunneling, etc) and Internet Connection Sharing (ICS), then this service and the following group of services can be disabled:

I highly recommend that you do not disable the Windows Firewall unless you use a different software firewall or external hardware solution, but the services listed above are all involved with each other.

Default Startup Type

OS SP0 SP1 SP2
Vista Home Basic Automatic (Started) Automatic (Started) Automatic (Started)
Vista Home Premium Automatic (Started) Automatic (Started) Automatic (Started)
Vista Business Automatic (Started) Automatic (Started) Automatic (Started)
Vista Ultimate Automatic (Started) Automatic (Started) Automatic (Started)
Vista Enterprise Automatic (Started) Automatic (Started) Automatic (Started)

Service Names

Service Name (registry): BFE
Display Name: Base Filtering Engine

Default Path and Command Line Options

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

Log On As

Dependencies

What service Base Filtering Engine needs to function properly:

What other service require Base Filtering Engine to function properly:

Enable Base Filtering Engine service

Replies (1) 

The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications. Windows Firewall depends on BFE to work correctly.

Please go ahead and follow the methods mentioned and later update us on the status of the issue.

Method 2:
I would suggest you to disable and re-enable Base Filtering Engine Service and check if the issue persists.
a. Click on Start.
b. In the search box type ‘service’ without quotes and select services.
c. Right click on Base Filtering Engine Click on Stop.
d. Once again Right click on Base Filtering Engine and click on Start.

Method 3:
If the above steps fail, then I would suggest you to run SFC scan. SFC scan will replace the missing or corrupted files.

How to use the System File Checker tool to troubleshoot missing or corrupted system files on Windows Vista or on Windows 7
http://support.microsoft.com/kb/929833

Please perform these recommended steps and post back if you are still experiencing the issue.

win 7: base filtering engine service missing (gone, does not exist):

Win-7 Home Premium: On Norton AV install I got an error message that said my Base Filtering Engine Service was missing. I checked my services and the Base Filtering Engine Service is not there (gone, deleted, does not exist). Problem may be due to «Win 7 Home Security 2012» virus which I’ve had problems with recently.

Can anyone tell me best, simplest way to get Base Filtering Engine back? I’d rather not resort to restore or OS reinstall, but if that’s the only way, then so be it.

Win-7 Home Premium: On Norton AV install I got an error message that said my Base Filtering Engine Service was missing. I checked my services and the Base Filtering Engine Service is not there (gone, deleted, does not exist). Problem may be due to «Win 7 Home Security 2012» virus which I’ve had problems with recently.

Can anyone tell me best, simplest way to get Base Filtering Engine back? I’d rather not resort to restore or OS reinstall, but if that’s the only way, then so be it.

Hi, welcome. Researching in the wild I have found a workaround that may fix it and as it was not official, I did not divulgate it here at Answers, a place by people with multiple levels of IT know-how. As I have found a similar answer confirmed by a Forum Moderator here, you can follow this link to see if it helps you, if not, be prepared to go into the restore or reinstall process. Good Luck and Regards. PS — Actually, t here is not an easy and safe way to fix this so far.

Читайте также:  Драйвера nvidia 2016 года для windows 10 64 bit

Base Filtering Engine

General Information

Base Filtering Engine is needed for some functions (HTTP scanning) of ESET NOD32 Antivirtus, and it will complain about it not being available if it is disabled. This service is also needed for proper functionality of ZoneAlarm v9.2.x (free).

Windows 8

Default Description

The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.

Additional Information

None at this time.

Default Startup Type

OS SP0
Windows 8 x86 Automatic (Started)
Windows 8 x64 Automatic (Started)
Windows 8 Pro x86 Automatic (Started)
Windows 8 Pro x64 Automatic (Started)
Windows 8 Enterprise x86 Automatic (Started)
Windows 8 Enterprise x64 Automatic (Started)

Service Names

Service Name (registry): BFE
Display Name: Base Filtering Engine

Default Path and Command Line Options

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

Log On As

Account: Local Service

Dependencies

Note: No dependencies are listed for any service in the WDP build I used to draft this information.

Windows 7

Default Description

The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.

Additional Information

If you use an external hardware firewall/gateway/router between your computer and the internet, do not use IPsec (VPN tunneling, etc) and Internet Connection Sharing (ICS), then this service and the following group of services can be disabled:

I highly recommend that you do not disable the Windows Firewall unless you use a different software firewall or external hardware solution, but the services listed above are all involved with each other.

Default Startup Type

OS SP0 SP1
Windows 7 Starter Automatic (Started) Automatic (Started)
Windows 7 Home Basic Automatic (Started) Automatic (Started)
Windows 7 Home Premium Automatic (Started) Automatic (Started)
Windows 7 Professional Automatic (Started) Automatic (Started)
Windows 7 Ultimate Automatic (Started) Automatic (Started)
Windows 7 Enterprise Automatic (Started) Automatic (Started)

Service Names

Service Name (registry): BFE
Display Name: Base Filtering Engine

Default Path and Command Line Options

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

Log On As

Account: Local Service

Dependencies

What service Base Filtering Engine needs to function properly:

What other service require Base Filtering Engine to function properly:

Windows Vista

Default Description

The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.

Additional Information

If you use an external hardware firewall/gateway/router between your computer and the internet, do not use IPsec (VPN tunneling, etc) and Internet Connection Sharing (ICS), then this service and the following group of services can be disabled:

I highly recommend that you do not disable the Windows Firewall unless you use a different software firewall or external hardware solution, but the services listed above are all involved with each other.

Default Startup Type

OS SP0 SP1 SP2
Vista Home Basic Automatic (Started) Automatic (Started) Automatic (Started)
Vista Home Premium Automatic (Started) Automatic (Started) Automatic (Started)
Vista Business Automatic (Started) Automatic (Started) Automatic (Started)
Vista Ultimate Automatic (Started) Automatic (Started) Automatic (Started)
Vista Enterprise Automatic (Started) Automatic (Started) Automatic (Started)

Service Names

Service Name (registry): BFE
Display Name: Base Filtering Engine

Default Path and Command Line Options

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

Log On As

Account: Local Service

Dependencies

What service Base Filtering Engine needs to function properly:

What other service require Base Filtering Engine to function properly:

Оцените статью