Does WFP network driver must check the FWPS_RIGHT_ACTION_WRITE flag when modify the stream package RRS feed

  • Question

  •    I have develop a WFP driver,  and may encrypt(modify inject) the stream package. I have read microsoft WFP driver sample, such as inspect, it have check the FWPS_RIGHT_ACTION_WRITE flag before check the stream package.

       Now problem is if one windows have two WFP network driver, Kaspersky and mine, If i check the FWPS_RIGHT_ACTION_WRITE  flag, it would effect user network transfer speed. And i contact Kaspersky technology support, They said when have two WFP driver on one Windows, and check the FWPS_RIGHT_ACTION_WRITE flag, it would cause the problem, so they suggest me to remove check the FWPS_RIGHT_ACTION_WRITE  flag, said it no need.

      My problem is it must to check the FWPS_RIGHT_ACTION_WRITE flag before i modify the stream package? If not check, any problem?

    Wednesday, March 28, 2018 4:51 AM