windows.firewall.rule
Description
windows firewall rule entry https://docs.microsoft.com/en-us/previous-versions/windows/desktop/wfascimprov/msft-netfirewallrule
Fields
ID | TYPE | DESCRIPTION |
---|---|---|
instanceID | string | a string that uniquely identifies this instance within the PolicyStore |
name | string | name of the rule |
displayName | string | localized name of this rule |
description | string | brief description of the rule |
displayGroup | string | the group that this rule belongs to |
enabled | int | indicates whether this rule is administratively enabled or disabled, values: enabled (1), disabled (2) |
direction | int | specifies which direction of traffic to match with this rule, values: inbound (1), outbound (2) |
action | int | specifies the action to take on traffic that matches this rule |
edgeTraversalPolicy | int | specifies how this firewall rule will handle edge traversal cases, values: block (0), allow (1), defer to user (2), defer to app (3) |
looseSourceMapping | bool | whether to group UDP packets into conversations based upon the local address, local port, and remote port |
localOnlyMapping | bool | whether to group UDP packets into conversations based only upon the local address and port |
primaryStatus | int | PrimaryStatus provides a high level status value, values: unknown (0), ok (1), degraded (2), error (3) |
status | string | detailed status of the rule |
enforcementStatus | string | if this object is retrieved from the ActiveStore |
policyStoreSource | string | contains the path to the policy store where this rule originally came from |
policyStoreSourceType | int | describes the type of policy store where this rule originally came from |