NTSTATUS 0xC0220024 (STATUS_FWP_INVALID_ACTION

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

A WFP filter action is not a valid action type for the supplied filter object.

Previous	Next
STATUS_FWP_NULL_DISPLAY_NAME	STATUS_FWP_INVALID_WEIGHT

STATUS_FWP_INVALID_ACTION_TYPE

The action encoding is invalid before layer compatibility is even considered

STATUS_FWP_INVALID_ACTION_TYPE identifies the action field of a filter. The FWPM_ACTION0 structure controls what happens after all conditions are true, and its type is not a free-form numeric value. This status is earlier and narrower than a valid action that later proves incompatible with the selected layer or sublayer.

Trace the action type and any associated callout key as one unit. A callout-style action is not merely a permit or block action with extra metadata; it relies on a registered callout and documented registration order. Changing an invalid action to permit just to finish installation can create an unintended bypass.

What to inspect

The FWP_ACTION_TYPE value and the full FWPM_ACTION0 payload.
Whether a callout action carries the intended callout key and that callout is registered.
The target layer and sublayer, kept for the later compatibility checks.
The installation transaction so a rejected filter is not mistaken for an active rule.

References

Looking for a different code? Search another status or error code.