windows.firewall.rule

Description

windows firewall rule entry https://docs.microsoft.com/en-us/previous-versions/windows/desktop/wfascimprov/msft-netfirewallrule

Fields

ID	TYPE	DESCRIPTION
instanceID	string	a string that uniquely identifies this instance within the PolicyStore
name	string	name of the rule
displayName	string	localized name of this rule
description	string	brief description of the rule
displayGroup	string	the group that this rule belongs to
enabled	int	indicates whether this rule is administratively enabled or disabled, values: enabled (1), disabled (2)
direction	int	specifies which direction of traffic to match with this rule, values: inbound (1), outbound (2)
action	int	specifies the action to take on traffic that matches this rule
edgeTraversalPolicy	int	specifies how this firewall rule will handle edge traversal cases, values: block (0), allow (1), defer to user (2), defer to app (3)
looseSourceMapping	bool	whether to group UDP packets into conversations based upon the local address, local port, and remote port
localOnlyMapping	bool	whether to group UDP packets into conversations based only upon the local address and port
primaryStatus	int	PrimaryStatus provides a high level status value, values: unknown (0), ok (1), degraded (2), error (3)
status	string	detailed status of the rule
enforcementStatus	string	if this object is retrieved from the ActiveStore
policyStoreSource	string	contains the path to the policy store where this rule originally came from
policyStoreSourceType	int	describes the type of policy store where this rule originally came from