The data type for the condition value for each filtering condition is specified as an FWP_DATA_TYPE value as follows:
| Filtering condition identifier | Condition value data type |
|---|
| FWPM_CONDITION_IP_LOCAL_ADDRESS | For an IPv4 address:
FWP_V4_ADDR_MASK or FWP_UINT32
For an IPv6 address:
FWP_V6_ADDR_MASK or FWP_BYTE_ARRAY16_TYPE |
| FWPM_CONDITION_IP_REMOTE_ADDRESS | For an IPv4 address:
FWP_V4_ADDR_MASK or FWP_UINT32
For an IPv6 address:
FWP_V6_ADDR_MASK or FWP_BYTE_ARRAY16_TYPE |
| FWPM_CONDITION_IP_SOURCE_ADDRESS | For an IPv4 address:
FWP_V4_ADDR_MASK or FWP_UINT32
For an IPv6 address:
FWP_V6_ADDR_MASK or FWP_BYTE_ARRAY16_TYPE |
| FWPM_CONDITION_IP_DESTINATION_ADDRESS | For an IPv4 address:
FWP_V4_ADDR_MASK or FWP_UINT32
For an IPv6 address:
FWP_V6_ADDR_MASK or FWP_BYTE_ARRAY16_TYPE |
| FWPM_CONDITION_IP_LOCAL_ADDRESS_TYPE | FWP_UINT8 |
| FWPM_CONDITION_IP_DESTINATION_ADDRESS_TYPE | FWP_UINT8 |
| FWPM_CONDITION_IP_LOCAL_INTERFACE | FWP_UINT64 |
| FWPM_CONDITION_IP_FORWARD_INTERFACE | FWP_UINT64 |
| FWPM_CONDITION_IP_PROTOCOL | FWP_UINT8 |
| FWPM_CONDITION_IP_LOCAL_PORT | FWP_UINT16 |
| FWPM_CONDITION_IP_REMOTE_PORT | FWP_UINT16 |
| FWPM_CONDITION_ICMP_TYPE | FWP_UINT16 |
| FWPM_CONDITION_ICMP_CODE | FWP_UINT16 |
| FWPM_CONDITION_EMBEDDED_LOCAL_ADDRESS_TYPE | FWP_UINT8 |
| FWPM_CONDITION_EMBEDDED_REMOTE_ADDRESS | For an IPv4 address:
FWP_V4_ADDR_MASK or FWP_UINT32
For an IPv6 address:
FWP_V6_ADDR_MASK or FWP_BYTE_ARRAY16_TYPE |
| FWPM_CONDITION_EMBEDDED_PROTOCOL | FWP_UINT8 |
| FWPM_CONDITION_EMBEDDED_LOCAL_PORT | FWP_UINT16 |
| FWPM_CONDITION_EMBEDDED_REMOTE_PORT | FWP_UINT16 |
| FWPM_CONDITION_FLAGS | FWP_UINT32 |
| FWPM_CONDITION_DIRECTION | FWP_UINT32 |
| FWPM_CONDITION_INTERFACE_INDEX | FWP_UINT32 |
| FWPM_CONDITION_SUB_INTERFACE_INDEX | FWP_UINT32 |
| FWPM_CONDITION_SOURCE_INTERFACE_INDEX | FWP_UINT32 |
| FWPM_CONDITION_SOURCE_SUB_INTERFACE_INDEX | FWP_UINT32 |
| FWPM_CONDITION_DESTINATION_INTERFACE_INDEX | FWP_UINT32 |
| FWPM_CONDITION_DESTINATION_SUB_INTERFACE_INDEX | FWP_UINT32 |
| FWPM_CONDITION_ALE_APP_ID | FWP_BYTE_BLOB_TYPE |
| FWPM_CONDITION_ALE_USER_ID | FWP_SECURITY_DESCRIPTOR_TYPE |
| FWPM_CONDITION_ALE_REMOTE_USER_ID | FWP_SECURITY_DESCRIPTOR_TYPE |
| FWPM_CONDITION_ALE_REMOTE_MACHINE_ID | FWP_SECURITY_DESCRIPTOR_TYPE |
| FWPM_CONDITION_ALE_PROMISCUOUS_MODE | FWP_UINT8 |
| FWPM_CONDITION_ALE_SIO_FIREWALL_SYSTEM_PORT | FWP_UINT32 |
| FWPM_CONDITION_ALE_NAP_CONTEXT | FWP_UINT32 |
| FWPM_CONDITION_REMOTE_USER_TOKEN | FWP_SECURITY_DESCRIPTOR_TYPE |
| FWPM_CONDITION_RPC_IF_UUID | FWP_BYTE_ARRAY16_TYPE |
| FWPM_CONDITION_RPC_IF_VERSION | FWP_UINT16 |
| FWPM_CONDITION_RPC_IF_FLAG | FWP_UINT32 |
| FWPM_CONDITION_DCOM_APP_ID | FWP_BYTE_ARRAY16_TYPE |
| FWPM_CONDITION_IMAGE_NAME | FWP_BYTE_BLOB_TYPE |
| FWPM_CONDITION_RPC_PROTOCOL | FWP_UINT8 |
| FWPM_CONDITION_RPC_AUTH_TYPE | FWP_UINT8 |
| FWPM_CONDITION_RPC_AUTH_LEVEL | FWP_UINT8 |
| FWPM_CONDITION_SEC_ENCRYPT_ALGORITHM | FWP_UINT32 |
| FWPM_CONDITION_SEC_KEY_SIZE | FWP_UINT32 |
| FWPM_CONDITION_IP_LOCAL_ADDRESS_V4 | FWP_V4_ADDR_MASK or FWP_UINT32 |
| FWPM_CONDITION_IP_LOCAL_ADDRESS_V6 | FWP_V6_ADDR_MASK or FWP_BYTE_ARRAY16_TYPE |
| FWPM_CONDITION_PIPE | FWP_BYTE_BLOB_TYPE |
| FWPM_CONDITION_IP_REMOTE_ADDRESS_V4 | FWP_V4_ADDR_MASK or FWP_UINT32 |
| FWPM_CONDITION_IP_REMOTE_ADDRESS_V6 | FWP_V6_ADDR_MASK or FWP_BYTE_ARRAY16_TYPE |
| FWPM_CONDITION_PROCESS_WITH_RPC_IF_UUID | FWP_BYTE_ARRAY16_TYPE |
| FWPM_CONDITION_RPC_EP_VALUE | FWP_BYTE_BLOB_TYPE |
| FWPM_CONDITION_RPC_EP_FLAGS | FWP_UINT32 |
| FWPM_CONDITION_CLIENT_TOKEN | FWP_SECURITY_DESCRIPTOR_TYPE |
| FWPM_CONDITION_RPC_SERVER_NAME | FWP_BYTE_BLOB_TYPE |
| FWPM_CONDITION_RPC_SERVER_PORT | FWP_UINT16 |
| FWPM_CONDITION_RPC_PROXY_AUTH_TYPE | FWP_BYTE_BLOB_TYPE |
| FWPM_CONDITION_CLIENT_CERT_KEY_LENGTH | FWP_UINT32 |
| FWPM_CONDITION_CLIENT_CERT_OID | FWP_BYTE_BLOB_TYPE |