CLOSE
Updated on 31 Jul, 20252 mins read 11 views

What is the Fwpm* API?

The Fwpm* API is the user-mode interface to the WFP engine. It allows trusted applications (like your admin console or security agent) to:

  • Connect to the Base Filtering Engine (BFE)
  • Create and manage filters
  • Register or reference sublayers
  • Enumerate and audit filter state

These functions are part of the Windows Filtering Platform Management API and defined in:

  • Header: fwpmu.h
  • Library: Fwpuclnt.lib
  • DLL: Fwpuclnt.dll

Key Functions

FunctionPurpose
FwpmEngineOpen0()Opens a session with BFE
FwpmSubLayerAdd0()Adds a custom sublayer
FwpmFilterAdd0()Adds a filter to a specific layer
FwpmFilterDeleteByKey0()Deletes a filter using its GUID
FwpmEngineClose0()Closes the session

 

Leave a comment

Your email address will not be published. Required fields are marked *