ITsVISTA
Information that makes life easier when it comes to installing, managing, and using Windows Vista.
Start About FAQ Blogroll Shop
← links for 2007-03-21 ITsVISTA Tip 46: Let Vista Use Your Flash Drive for ReadyBoost →

Vista's Base Filtering Engine Service

March 21st, 2007 · 2 Comments · 4,547 views
Tags:

ServicesThe Base Filtering Engine Service (BFE), part of Windows Filtering Platform (WFP), plays an important roll in Vista’s network security. It is part of the filter between features that talk to the network (like Remote Access, firewall, Internet Connection Sharing, etc) and the TCP/IP stack. If you don’t ever connect to a network, then it’s safe to disable this service.

I’ve seen many sites suggest that if you use a third-party firewall it’s safe to disable this, but that is not the case. BFE ties into many other features besides the firewall, and may even be required for a third-party firewall to function properly. I would recommend keeping this service enabled. Save your resources by disabling more frivolous services, but take advantage of the extra security this one offers.

Display Name:
Base Filtering Engine
Service Name:
BFE
Process Name:
svchost.exe
Description:
The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.
Path to Executable:
%windir%\system32\svchost.exe -k LocalServiceNoNetwork
Default Startup:
  • Home Basic: Automatic
  • Home Premium: Automatic
  • Business: Automatic
  • Enterprise: Automatic
  • Ultimate: Automatic
Log On As:
Local Service
Desktop Interaction:
No
Depends On:
  • Remote Procedure Call (RPC)
    • DCOM Server Process Launcher
Required For:
  • IKE and AuthIP IPsec Keying Modules
  • Internet Connection Sharing (ICS)
  • IPsec Policy Agent
  • Routing and Remote Access
  • Windows Firewall
Memory:
N/A
CPU:
N/A
Do you know something about this service that I don't? Please leave a comment below so I, and everyone else reading this, can benefit from your knowledge!

Get notified of new posts for FREE via RSS or E-mail

Subscribe to ITsVISTA!

Digg Digg | Add to Mixx! Mixx | Netscape Propeller | Slashdot Slashdot | Stumble Stumble

Related Posts

Comments

  • David Stockwell

    Nov 7, 2007 at 1:12 pm

    I ran into a problem, where my system was unable to get a DHCP address from my router, and was returning General Failure when pinging any address, including 127.0.0.1!

    Device Mangler indicated no problems with the on-board ethernet port, and everything working properly (it had the Auto-Config address, which goes exactly nowhere).

    I also disabled the on-board port and added a PCI Ethernet card, with the same results. Replace that card with another: same results.

    Ultimately ended up disabling IPSec service and the Base Filtering Engine, which was the only thing that would fix this.

    As far as I have found, there is NOTHING on MSDN regarding this issue, or anything like it.

  • iggy

    Apr 15, 2008 at 9:19 am

    look up dhcp broadcast flag in vista registry. there is a MSDN article about this. known bug

Leave a Comment

← links for 2007-03-21 ITsVISTA Tip 46: Let Vista Use Your Flash Drive for ReadyBoost →