| Previous | Next |
| STATUS_FWP_NET_EVENTS_DISABLED | STATUS_FWP_KM_CLIENTS_ONLY |
STATUS_FWP_INCOMPATIBLE_LAYER
The operation does not belong at this packet-processing layer
STATUS_FWP_INCOMPATIBLE_LAYER means the selected WFP layer cannot support the requested operation. A layer represents a specific point in network processing and defines the schema for filters that may be added there; it is not just a convenient bucket for any network rule.
Diagnose the intended processing stage first. Moving a filter to a nearby layer can change which fields exist, whether traffic can be redirected or inspected, and when the action runs. Verify the layer GUID, IP family, user/kernel API boundary, and the operation’s documented compatibility before changing policy.
Useful comparison points
- The exact layer identifier and the WFP API or action being used.
- Conditions and context fields required by the proposed rule.
- Whether the target is an ALE, transport, stream, IPsec, or another processing stage.
- The behavior difference that would result from selecting an alternative layer.
References
- Microsoft: WFP error codes
- Microsoft: WFP sessions, transactions, and object lifetimes
- Microsoft: WFP object model
Looking for a different code? Search another status or error code.