locked
Should FWPM_CONDITION_ALE_APP_ID condition cause a callout if the application is already running? RRS feed

  • Question

  • I am adding occasionally conditions to the filter in my WFP callout driver. The condition I'm using is FWPM_CONDITION_ALE_APP_ID and it seems that if the application is not running when the filter is modified everything works fine, but if I add the condition for an application which is already running the callout is not invoked for communications of this program. Anyone knows if this is so and is it by design? If so, is there a way around this problem?

    Thanks.


    Freddy

    Friday, September 13, 2013 9:13 PM

Answers

  • If the app is already running, and your filter matches, then the callout should be invoked as a REAUTHORIZATION due to policy change.

    Hope this helps,


    Dusty Harper [MSFT]
    Microsoft Corporation
    ------------------------------------------------------------
    This posting is provided "AS IS", with NO warranties and confers NO rights
    ------------------------------------------------------------


    Sunday, October 13, 2013 2:41 AM
    Moderator

All replies

  • Any reply at all???

    Freddy

    Thursday, September 26, 2013 6:12 PM
  • If the app is already running, and your filter matches, then the callout should be invoked as a REAUTHORIZATION due to policy change.

    Hope this helps,


    Dusty Harper [MSFT]
    Microsoft Corporation
    ------------------------------------------------------------
    This posting is provided "AS IS", with NO warranties and confers NO rights
    ------------------------------------------------------------


    Sunday, October 13, 2013 2:41 AM
    Moderator
  • Thanks Dusty, it looks like a solution. I'll check it later this week.

    Freddy

    Monday, October 14, 2013 4:41 PM