| Previous | Next |
| STATUS_FWP_ACTION_INCOMPATIBLE_WITH_SUBLAYER | STATUS_FWP_CONTEXT_INCOMPATIBLE_WITH_CALLOUT |
STATUS_FWP_CONTEXT_INCOMPATIBLE_WITH_LAYER
The context object does not match the packet-processing stage
STATUS_FWP_CONTEXT_INCOMPATIBLE_WITH_LAYER means a filter has context data whose type or role is not compatible with its layerKey. In FWPM_FILTER0, raw context is used without a provider-context flag, while a provider context is selected by key when that flag is present. These alternatives are not interchangeable payload slots.
Capture the filter flags, layer key, context key or raw value, and context object type together. Replacing a provider context with a raw integer only to pass validation can detach security or IPsec semantics that the filter was meant to carry.
What to inspect
- Whether
FWPM_FILTER_FLAG_HAS_PROVIDER_CONTEXTis set. - The chosen layer GUID and the provider-context type or raw-context meaning.
- The provider context key, owning provider, and lifetime.
- The call that created the context and the call that attached it to the filter.
References
- Microsoft: WFP error codes
- Microsoft: FWPM_FILTER0 context fields
- Microsoft: filtering layer identifiers
- Microsoft: WFP management functions
Looking for a different code? Search another status or error code.