Base Filtering Engine (BFE)Base Filtering Engine (BFE)

Registry Name

BFE

Display Name

Base Filtering Engine

Description

The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.

For more information, see the Additional Information section.

Default Status

Running

Default Startup Type

Automatic

Image Path

C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p

DLL File Path

C:\WINDOWS\System32\bfe.dll

Dependencies

The service depends on the following system components to function properly: System components that depend on this service to function properly:

Log On As

NT AUTHORITY\LocalService

Additional Information

The Base Filtering Engine (BFE) service manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. It acts as a core component of the Windows Filtering Platform (WFP), which is a framework for creating and managing network filtering applications.

This service is essential for the proper functioning of many Windows features, such as Windows Firewall, Windows Defender, VPN connections, IPsec, etc. If this service is stopped or disabled, some of these features may not work correctly or at all. It will also significantly reduce the security of the system and result in unpredictable behavior in IPsec management and firewall applications.