What does NTSTATUS 0xC022002A (STATUS_FWP_DUPLICATE_CONDITION) mean?

 
Previous Next
STATUS_FWP_RESERVED STATUS_FWP_DUPLICATE_KEYMOD

STATUS_FWP_DUPLICATE_CONDITION

One field appears more than once where WFP requires distinct conditions

STATUS_FWP_DUPLICATE_CONDITION is not the same as two different filters matching the same traffic. It occurs inside one filter or template when conditions operate on the same field. WFP filter conditions are normally combined with AND semantics, and duplicate field entries make the intended expression ambiguous or unsupported.

Normalize the policy model before creating the WFP array. Identify whether the intended logic is a range, an address-and-mask test, a single combined value, or separate filters. Do not rely on old platform-specific behavior for repeated field keys as a compatibility strategy.

What to inspect

  • Each fieldKey in the condition array and its source rule clause.
  • Whether the intended logic is intersection, alternatives, a range, or a mask.
  • The target Windows version and any legacy assumptions about repeated fields.
  • The final serialized condition array after all policy merges and generated defaults.

References


Looking for a different code? Search another status or error code.