subject: Windows Filtering Platform - Helping Different Software program Manufacturers to Alter TCP/IP Packets [print this page] Windows Filtering Platform - Helping Different Software program Manufacturers to Alter TCP/IP Packets
Windows Filtering Platform, also known as WFP, is a reasonably new service available just for Windows Vista and as well as for Windows Server 2008, of which allows server vendors to perform corrections, along with monitor and grant authorization for various kinds of web connections for TCP/IP packets. This provides an excellent control around ingoing and outgoing web traffic, hence having the ability to more easily develop antivirus software and to secure your system against threats, establish security conditions, as well as create firewalls. WFP also includes new firewall features, according to authenticated communication and active configuration of the firewall.
There are a lot of benefits of utilizing the Windows Filtering Platform architecture. First of al, there is greater control and decision in the TCP/IP processing paths than there is within the situation of Windows XP and Windows 2003. Also, you don't have to create a blocking engine, given the fact that WFP provides you with one. Applying this system may prevent damage to your computer, and you will not have any troubles with installing a latest web protection feature at the moment where one is released.
Another advantage using the Windows Filtering Platform concept is the fact that there are actually much less connections blocked or dropped and fewer risks taken. The new filtering interface provides you with loads of different opportunities, and a huge power of decision over the way the filtering is done, and the data that enters your system or is avoided from getting into there. The WFP system processes all the files that enters your computer, blocking then enhancing that prior to it's organized by means of other features. This operates a simple inspection over the data files, modifying this.
This Windows Filtering Platform is reliant on 4 primary components. To start with, there are the Shim components (these indicate the internal structure of a package as properties), and they consist in: a Transport Layer and a Network Layer Modules (TLM and NLM), then there is an Application Layer Enforcement (ALE) then the RPC Runtime Shim, the Stream Shim as well as the Internet Message Protocol. The next feature will be the filter engine, providing the filtering capabilities. It is here how the packets of files are allowed into your system or blocked out of it. Yet another feature of the Windows Filtering Platform is the base filtering engine, which takes good care of the particular filtering engine. It is a spot where filtering principles as well as the whole security product are usually approved and enforced. The callout, the last feature from the WFP will be a function exposedby the filtering driver, each time a filter is matched.
As a way to make your system compatible with Windows Filtering Platform, you'll need to convert your components. Hence, several improvements are going to be made on the data processing procedures you already have on your computer. Most of your firewall hooks and filter hooks will probably be replaced with a user-mode application which are use of the WFP Win32 API's.
