3.1.4 Message Processing Events and Sequencing Rules

Article
04/27/2022

This protocol MUST indicate to the RPC runtime that it is to perform a strict Network Data Representation (NDR) data consistency check at target level 6.0, as specified in [MS-RPCE].

This protocol MUST indicate to the RPC runtime, via the strict_context_handle attribute, that it is to reject the use of context handles that are created by using a different method of RPC interface than this one, as specified in [MS-RPCE] section 3.

Because the server makes access control decisions as part of message processing, the client MUST authenticate to the server as specified in section 2.1. The server MUST verify that the client is authorized to perform the requested operation. The server MUST retrieve the client's identity token by invoking the abstract interface GetRpcImpersonationAccessToken() as specified in [MS-RPCE] section 3.3.3.4.3.1. The server implementation maintains a list of authorized clients. The protocol has no methods for reading or setting that list. If the client invoking the method is not on the authorized list, the server MUST fail the call and return an error code of ERROR_ACCESS_DENIED (5).<32>

Methods in RPC Opnum Order

Method	Description
RRPC_FWOpenPolicyStore	This method requests the server to open a specified policy store. Opnum: 0
RRPC_FWClosePolicyStore	This method receives an opened store handle and closes it, freeing any resources that were allocated by the server-to-server operations on the opened store. Opnum: 1
RRPC_FWRestoreDefaults	This method erases the local policy store and replaces it with the default policy that the server host had out of the box after installation. After the method returns, the local store contains exactly the same policy as it did after installation. Opnum: 2
RRPC_FWGetGlobalConfig	This method retrieves the value of a global policy configuration option. The client specifies to the server from what store this value MUST be retrieved and in what specific configuration option it is interested. Opnum: 3
RRPC_FWSetGlobalConfig	This method modifies the value of a global policy configuration option. The client specifies to the server in what store this value MUST be written and what specific configuration option it is interested in modifying. Opnum: 4
RRPC_FWAddFirewallRule	This method requests the server to add the specified firewall rule in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 5
RRPC_FWSetFirewallRule	This method requests the server to modify the specified firewall rule in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 6
RRPC_FWDeleteFirewallRule	This method requests the server to delete the specified firewall rule in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 7
RRPC_FWDeleteAllFirewallRules	This method deletes all firewall rules in the firewall linked list of the memory representation of the store being modified. Opnum: 8
RRPC_FWEnumFirewallRules	This method requests the server to return all the firewall rules contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of all the firewall rule objects. Opnum: 9
RRPC_FWGetConfig	This method retrieves the value of a profile configuration option. The client specifies to the server from what store and profile this value MUST be retrieved and in what specific configuration option it is interested. Opnum: 10
RRPC_FWSetConfig	This method modifies the value of a profile configuration option. The client specifies to the server in what store and profile this value MUST be written and what specific configuration option it is interested in modifying. Opnum: 11
RRPC_FWAddConnectionSecurityRule	This method requests the server to add the connection security rule in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 12
RRPC_FWSetConnectionSecurityRule	This method requests the server to modify the specified connection security rule in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 13
RRPC_FWDeleteConnectionSecurityRule	This method requests the server to delete the specified connection security rule in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 14
RRPC_FWDeleteAllConnectionSecurityRules	This method requests the server to delete all the connection security rules in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 15
RRPC_FWEnumConnectionSecurityRules	This method requests the server to return all the connection security rules contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of all the connection security rule objects. Opnum: 16
RRPC_FWAddAuthenticationSet	This method requests the server to add the authentication set in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 17
RRPC_FWSetAuthenticationSet	This method requests the server to modify the specified authentication set in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 18
RRPC_FWDeleteAuthenticationSet	This method requests the server to delete the specified authentication set in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 19
RRPC_FWDeleteAllAuthenticationSets	This method requests the server to delete all the authentication sets of a specific IPsec phase in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 20
RRPC_FWEnumAuthenticationSets	This method requests the server to return all the authentication sets of the specified IPsec phase contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of these objects. Opnum: 21
RRPC_FWAddCryptoSet	This method adds a cryptographic set in the cryptographic linked list of the memory representation of the store being modified. Opnum: 22
RRPC_FWSetCryptoSet	This method requests the server to modify the specified cryptographic set in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 23
RRPC_FWDeleteCryptoSet	This method requests the server to delete the specified cryptographic set in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 24
RRPC_FWDeleteAllCryptoSets	This method requests the server to delete all the cryptographic sets of a specific IPsec phase in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 25
RRPC_FWEnumCryptoSets	This method requests the server to return all the cryptographic sets of the specified IPsec phase contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of all these cryptographic objects. Opnum: 26
RRPC_FWEnumPhase1SAs	This method requests the server to return all the security associations of the IPsec first-negotiation phase contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of all these security associations. Opnum: 27
RRPC_FWEnumPhase2SAs	This method requests the server to return all the security associations of the IPsec second-negotiation phase contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of all these security associations. Opnum: 28
RRPC_FWDeletePhase1SAs	This method requests the server to delete all the IPsec first negotiation phase security associations that match the specified endpoints. Opnum: 29
RRPC_FWDeletePhase2SAs	This method requests the server to delete all the IPsec second negotiation phase security associations that match the specified endpoints. Opnum: 30
RRPC_FWEnumProducts	This method requests the server to return all the registered third-party software components registered with the firewall and advanced security component. Opnum: 31
RRPC_FWAddMainModeRule	This method requests the server to add the main mode rule in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 32
RRPC_FWSetMainModeRule	This method requests the server to modify the specified main mode rule in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 33
RRPC_FWDeleteMainModeRule	This method requests the server to delete the specified main mode rule in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 34
RRPC_FWDeleteAllMainModeRules	This method requests the server to delete all the main mode rules in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 35
RRPC_FWEnumMainModeRules	This method requests the server to return all the main mode rules contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of all the main mode rule objects. Opnum: 36
RRPC_FWQueryFirewallRules	This method requests the server to return all the firewall rules that match the specified query object contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of all the firewall rule objects. Opnum: 37
RRPC_FWQueryConnectionSecurityRules	This method requests the server to return all the connection security rules that match the specified query object contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of all the connection security rule objects. Opnum: 38
RRPC_FWQueryMainModeRules	This method requests the server to return all the main mode rules that match the specified query object contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of all the main mode rule objects. Opnum: 39
RRPC_FWQueryAuthenticationSets	This method requests the server to return all the authentication sets that match the specified query object contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of all the authentication set objects. Opnum: 40
RRPC_FWQueryCryptoSets	This method requests the server to return all the crypto sets that match the specified query object contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of all the crypto set objects. Opnum: 41
RRPC_FWEnumNetworks	This method requests the server to return all the networks to which the host that has the firewall and advanced security component is connected. Opnum: 42
RRPC_FWEnumAdapters	This method requests the server to return all the network interfaces that are used by the host that has the firewall and advanced security component. Opnum: 43
RRPC_FWGetGlobalConfig2_10	This method retrieves the value of a global policy configuration option. The client specifies to the server from what store this value MUST be retrieved and in what specific configuration option it is interested. Opnum: 44
RRPC_FWGetConfig2_10	This method retrieves the value of a profile configuration option. The client specifies to the server from what store and profile this value MUST be retrieved and in what specific configuration option it is interested. Opnum: 45
RRPC_FWAddFirewallRule2_10	This method requests the server to add the specified firewall rule in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 46
RRPC_FWSetFirewallRule2_10	This method requests the server to modify the specified firewall rule in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 47
RRPC_FWEnumFirewallRules2_10	This method requests the server to return all the firewall rules contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of all the firewall rule objects. Opnum: 48
RRPC_FWAddConnectionSecurityRule2_10	This method requests the server to add the connection security rule in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 49
RRPC_FWSetConnectionSecurityRule2_10	This method requests the server to modify the specified connection security rule in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 50
RRPC_FWEnumConnectionSecurityRules2_10	This method requests the server to return all the connection security rules contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of all the connection security rule objects. Opnum: 51
RRPC_FWAddAuthenticationSet2_10	This method requests the server to add the authentication set in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 52
RRPC_FWSetAuthenticationSet2_10	This method requests the server to modify the specified authentication set in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 53
RRPC_FWEnumAuthenticationSets2_10	This method requests the server to return all the authentication sets of the specified IPsec phase contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of these objects. Opnum: 54
RRPC_FWAddCryptoSet2_10	This method adds a cryptographic set in the cryptographic linked list of the memory representation of the store being modified. Opnum: 55
RRPC_FWSetCryptoSet2_10	This method requests the server to modify the specified cryptographic set in the policy contained in the policy store that is referenced by the specified opened policy store handle. Opnum: 56
RRPC_FWEnumCryptoSets2_10	This method requests the server to return all the cryptographic sets of the specified IPsec phase that is contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of all these cryptographic objects. Opnum: 57
RRPC_FWAddConnectionSecurityRule2_20	This method requests the server to add the specified connection security rule in the policy contained in the policy store that is referenced by the handle specified in the hPolicyStore parameter. Opnum: 58
RRPC_FWSetConnectionSecurityRule2_20	This method requests the server to modify the specified connection security rule in the policy contained in the policy store that is referenced by the handle specified in the hPolicyStore parameter. Opnum: 59
RRPC_FWEnumConnectionSecurityRules2_20	This method requests the server to return all the connection security rules contained in the store that is referenced by the hPolicyStore handle. Opnum: 60
RRPC_FWQueryConnectionSecurityRules2_20	This method requests the server to return all the connection security rules that match the specified query object that are contained in the store that is referenced by the hPolicy handle. Opnum: 61
RRPC_FWAddAuthenticationSet2_20	This method requests the server to add the authentication set in the policy contained in the policy store that is referenced by the handle specified in the hPolicy parameter. Opnum: 62
RRPC_FWSetAuthenticationSet2_20	This method requests the server to modify the specified authentication set in the policy contained in the policy store that is referenced by the handle specified in the hPolicy parameter. Opnum: 63
RRPC_FWEnumAuthenticationSets2_20	This method requests the server to return all the authentication sets of the specified IPsec phase contained in the store that is referenced in the hPolicy handle. The method returns a linked list of these objects. Opnum: 64
RRPC_FWQueryAuthenticationSets2_20	This method requests the server to return all the authentication sets that match the specified query object that are contained in the store that is referenced in the hPolicy handle. Opnum: 65
RRPC_FWAddFirewallRule2_20	This method requests the server to add the specified firewall rule in the policy contained in the policy store referenced by the handle that is specified in the hPolicyStore parameter. Opnum: 66
RRPC_FWSetFirewallRule2_20	This method requests the server to modify the specified firewall rule in the policy contained in the policy store that is referenced by the handle specified in the hPolicyStore parameter. Opnum: 67
RRPC_FWEnumFirewallRules2_20	This method requests the server to return all the firewall rules contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of all the firewall rule objects. Opnum: 68
RRPC_FWQueryFirewallRules2_20	This method requests the server to return all the firewall rules matching the specified query object that are contained in the store referenced by the hPolicy handle. Opnum: 69
RRPC_FWAddFirewallRule2_24	This method requests the server to add the specified firewall rule in the policy contained in the policy store that is referenced by the handle specified in the hPolicyStore parameter. Opnum: 70
RRPC_FWSetFirewallRule2_24	This method requests the server to modify the specified firewall rule in the policy contained in the policy store that is referenced by the handle specified in the hPolicyStore parameter. Opnum: 71
RRPC_FWEnumFirewallRules2_24	This method requests the server to return all the firewall rules contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of all the firewall rule objects. Opnum: 72
RRPC_FWQueryFirewallRules2_24	This method requests the server to return all the firewall rules matching the specified query object that are contained in the store that is referenced by the hPolicyStore handle. Opnum: 73
RRPC_FWAddFirewallRule2_25	This method requests the server to add the specified firewall rule in the policy contained in the policy store that is referenced by the handle specified in the hPolicyStore parameter. Opnum: 74
RRPC_FWSetFirewallRule2_25	This method requests the server to modify the specified firewall rule in the policy contained in the policy store that is referenced by the handle specified in the hPolicyStore parameter. Opnum: 75
RRPC_FWEnumFirewallRules2_25	This method requests the server to return all the firewall rules contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of all the firewall rule objects. Opnum: 76
RRPC_FWQueryFirewallRules2_25	This method requests the server to return all the firewall rules matching the specified query object that are contained in the store that is referenced by the hPolicyStore handle. Opnum: 77
RRPC_FWAddFirewallRule2_26	This method requests the server to add the specified firewall rule in the policy contained in the policy store that is referenced by the handle specified in the hPolicyStore parameter. Opnum: 78
RRPC_FWSetFirewallRule2_26	This method requests the server to modify the specified firewall rule in the policy contained in the policy store that is referenced by the handle specified in the hPolicyStore parameter. Opnum: 79
RRPC_FWEnumFirewallRules2_26	This method requests the server to return all the firewall rules contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of all the firewall rule objects. Opnum: 80
RRPC_FWQueryFirewallRules2_26	This method requests the server to return all the firewall rules matching the specified query object that are contained in the store that is referenced by the hPolicyStore handle. Opnum: 81
RRPC_FWAddFirewallRule2_27	The RRPC_FWAddFirewallRule2_27 method requests the server to add the specified firewall rule to the policy contained in the policy store that is referenced by the handle specified in the hPolicyStore parameter. Opnum: 82
RRPC_FWSetFirewallRule2_27	The RRPC_FWSetFirewallRule2_27 method requests the server to modify the specified connection security rule in the policy contained in the policy store that is referenced by the handle specified in the hPolicyStore parameter. Opnum: 83
RRPC_FWEnumFirewallRules2_27	The RRPC_FWEnumFirewallRules2_27 method requests the server to return all the firewall rules contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of all the firewall rule objects. Opnum: 84
RRPC_FWQueryFirewallRules2_27	The RRPC_FWQueryFirewallRules2_27 method requests the server to return all the firewall rules that match the specified query object that are contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of all the connection security rule objects. Opnum: 85
RRPC_FWAddFirewallRule2_31	The RRPC_FWAddFirewallRule2_31 method requests the server to add the specified firewall rule to the policy contained in the policy store that is referenced by the handle specified in the hPolicyStore parameter. Opnum: 86
RRPC_FWSetFirewallRule2_31	The RRPC_FWSetFirewallRule2_31 method requests the server to modify the specified connection security rule in the policy contained in the policy store that is referenced by the handle specified in the hPolicyStore parameter. Opnum: 87
RRPC_FWEnumFirewallRules2_31	The RRPC_FWEnumFirewallRules2_31 method requests the server to return the firewall rules matching the input flags contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of the corresponding firewall rule objects. Opnum: 88
RRPC_FWQueryFirewallRules2_31	The RRPC_FWQueryFirewallRules2_31 method requests the server to return all the firewall rules that match the specified query object, as are contained in the store that is referenced by the hPolicyStore handle. The method returns a linked list of all the firewall rules that match the specified query object. Opnum: 89

3.1.4 Message Processing Events and Sequencing Rules

Additional resources