Event ID:
5157
Category:
Object Access
Subcategory:
Filtering Platform Connection
Supported on:
Windows Vista, Windows Server 2008
The Windows Filtering Platform has blocked a connection.
Application Information:
Process ID: %1
Application Name: %2
Network Information:
Direction: %3
Source Address: %4
Source Port: %5
Destination Address: %6
Destination Port: %7
Protocol: %8
Filter Information:
Filter Run-Time ID: %9
Layer Name: %10
Layer Run-Time ID: %11