What is a Windows Filtering Platform and, how does it help?

The Windows Filtering Platform is a collection of services and API (Application Programming Interface) that helps developers create network filtering applications. It was first introduced in Windows Vista and since then has been a part of Windows. It is used to build independent firewalls, antivirus, and network-related applications. An application can also modify access points as they are processed. The Windows Filtering Platform includes the following:

Fix Windows Filtering Platform has blocked a connection?

There are several ways to fix this issue. You can use any of the below-given methods. Some of the solutions are as follows: Let us look at these solutions in more detail.

1] Performing an SFC scan

Follow the next steps to perform a quick SFC scan.  

2] Disabling the Windows Defender Firewall

Follow the next steps to disable a firewall on your PC.

Now check if the error, Windows Filtering Platform has blocked a connection problem is resolved.

3] Disabling the antivirus on your PC

Try resolving the error of 5157(F) by disabling the antivirus on your PC. Follow the next steps to perform this action:

4] Creating a new local account

Sometimes the error also occurs because the user account is corrupted. In that case, you can create a new local user account on the Windows 11 PC. If you are confused about whether you should create a Microsoft account or a local one, you can choose the latter one since it is not connected to the servers and can be used independently on the device.

5] Running the DISM tool

You can try to run a DISM (Deployment Image Servicing and Management) tool to resolve the error of the Windows Filtering Platform that has blocked a connection. Follow the next steps.

Please note Some of the solutions above, such as disabling the Windows Defender firewall or disabling the antivirus, remove the protection of your PC. These actions may pose a risk of virus attacks. Hence, use these solutions wisely. As soon as the error is resolved, restore the firewall and antivirus settings. Do let us know in case of any suggestions.

What is Event ID 5157?

This event documents each time the Windows Filtering Platform allows a program to link to another process (on the same or a remote computer) on a TCP or UDP port.

How to turn off the Windows Filtering Platform?

You can disable it in the group policy. Go to configuration – policies – windows settings – security settings – advanced audit policy configuration.

What does it mean when we get the message “Windows Filtering Platform has allowed a connection”?

You may get the message that the Windows Filtering Platform has allowed a connection during the Microsoft Windows Security Auditing. This event is logged when Windows Filtering Platform or WFP allows a program to connect to another process on the same or a remote computer. It does this on a TCP or UDP port. The event ID for this message is 5156.

5157 F   The Windows Filtering Platform has blocked a connection - 735157 F   The Windows Filtering Platform has blocked a connection - 185157 F   The Windows Filtering Platform has blocked a connection - 665157 F   The Windows Filtering Platform has blocked a connection - 55157 F   The Windows Filtering Platform has blocked a connection - 805157 F   The Windows Filtering Platform has blocked a connection - 65157 F   The Windows Filtering Platform has blocked a connection - 35157 F   The Windows Filtering Platform has blocked a connection - 275157 F   The Windows Filtering Platform has blocked a connection - 425157 F   The Windows Filtering Platform has blocked a connection - 275157 F   The Windows Filtering Platform has blocked a connection - 26