0

We have a windows 2008 server and lately we have started seeing a lot of 5152 Events logged in the server (Windows Filtering Platform blocked a packet).

We have an inbound rule configured to allow connections to the port which was working fine earlier. I'm not sure what changed lately. But this doesn't make any sense.

The packet is dropped even when windows firewall is disabled. What am I missing?

madaboutcode
  • 111
  • 4
  • Is the packet actually dropped, or is it incorrectly logged as dropped? http://support.microsoft.com/kb/969257 If it's really being dropped, what Shane said. – Katherine Villyard May 31 '13 at 13:32
  • I believe I have encountered a similar issue, did you get any resolution on this? My question is - http://serverfault.com/questions/688687/windows-filtering-platform-dropping-sql-server-connections – Matthew Abbott May 05 '15 at 13:30

1 Answers1

1

Filtering platform can be used by more than just windows firewall; I'd check if your host security (antivirus) software has a firewall feature enabled.

Shane Madden
  • 114,520
  • 13
  • 181
  • 251