Base Filtering Engine

ServicesThe Base Filtering Engine Service (BFE), part of Windows Filtering Platform (WFP), plays an important roll in Vista’s network security. It is part of the filter between features that talk to the network (like Remote Access, firewall, Internet Connection Sharing, etc) and the TCP/IP stack. If you don’t ever connect to a network, then it’s safe to disable this service.

I’ve seen many sites suggest that if you use a third-party firewall it’s safe to disable this, but that is not the case. BFE ties into many other features besides the firewall, and may even be required for a third-party firewall to function properly. I would recommend keeping this service enabled. Save your resources by disabling more frivolous services, but take advantage of the extra security this one offers.

Display Name:
Base Filtering Engine
Service Name:
BFE
Process Name:
svchost.exe
Description:
The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.
Path to Executable:
%windir%\system32\svchost.exe -k LocalServiceNoNetwork
Default Startup:
  • Home Basic: Automatic
  • Home Premium: Automatic
  • Business: Automatic
  • Enterprise: Automatic
  • Ultimate: Automatic
Log On As:
Local Service
Desktop Interaction:
No
Depends On:
  • Remote Procedure Call (RPC)
    • DCOM Server Process Launcher
Required For:
  • IKE and AuthIP IPsec Keying Modules
  • Internet Connection Sharing (ICS)
  • IPsec Policy Agent
  • Routing and Remote Access
  • Windows Firewall
Memory:
N/A
CPU:
N/A

12 Replies to “Base Filtering Engine”

  1. I ran into a problem, where my system was unable to get a DHCP address from my router, and was returning General Failure when pinging any address, including 127.0.0.1!

    Device Mangler indicated no problems with the on-board ethernet port, and everything working properly (it had the Auto-Config address, which goes exactly nowhere).

    I also disabled the on-board port and added a PCI Ethernet card, with the same results. Replace that card with another: same results.

    Ultimately ended up disabling IPSec service and the Base Filtering Engine, which was the only thing that would fix this.

    As far as I have found, there is NOTHING on MSDN regarding this issue, or anything like it.

  2. I would disable this service. It blocks a lot of applications from working properly.

    I would recommend a hardware firewall if you are concerned about network security. Any router you install in your home should have a firewall.

  3. I have a Windows Vista Home Premium SP1 laptop that the BFE service has stopped working on and I can’t get it restarted, keep getting “Error 5: Access is Denied” when attempting to restart – on an administrator account.

    Without this running I can’t get any software Firewall to run and running off a USB 3G modem mean I can’t utilise a hardware Firewall.

    Any suggestions?

  4. In my Vista OS ,base filtering engine error 5 access denied is encountered.Please help me in this regard

  5. So have I !
    Can’t get any access to vista from xp while BFE is running… 🙁
    Have anyone resolved the problem?

  6. Not any tool has the exact simplicity of use that No Hands SEARCH ENGINE MARKETING has, the one required inputs are your internet site target, search keywords and phrases and desired anchorman texts as well as NHSEO will perform everything available for you.

  7. My partner and I stumbled over here by a different website and thought I should check things out.

    I like what I see so i am just following you. Look forward to
    looking over your web page for a second time.

    Here is my web site – voyance”>annuaire inversé

  8. 2 F SI Quattro; Chevy Corvette ZO6; Dodge Viper SRT10; Falken Tire Ford Mustang GT; Ford
    GT; Lamborghini Gallardo LP560-4; Lamborghini Murcielago LP640;
    Lotus Exige S; Mercedes Benz SL65 AMG; NIssan GT-R (R35);
    Nissan GT-R Spec – V R35; Porsche 911 GT2; Porsche 911 GT3 RS.

    Many people decide to build a track day car versus a race car for a
    few reasons. Also that year, the Shelby Mustang’s fastback bodystyle
    was joined by a convertible, to further appeal to the boulevard cruising set.

    Look into my website … gt racing 2 trucchi soldi

Leave a Reply