| Previous | Next |
| STATUS_FWP_EM_NOT_SUPPORTED | STATUS_FWP_PROVIDER_CONTEXT_MISMATCH |
STATUS_FWP_NEVER_MATCH
The enumeration or subscription filter can never match anything
These status values come from the Windows Filtering Platform path. For STATUS_FWP_NEVER_MATCH, wFP classifies traffic through layers, filters, provider contexts, sublayers, and callouts; IPsec policy is also configured through WFP at IKE/AuthIP-related layers.
WFP enumeration and notification APIs can restrict results by template. This status tells you the template is contradictory or targets an impossible combination, so waiting for matches will not help.
For STATUS_FWP_NEVER_MATCH, for diagnostics, keep the failing API call, layer or sublayer key, provider context type, filter condition set, callout id, engine state, and whether the Base Filtering Engine, IKEEXT, TCP/IP stack, or L2 path was ready.
What to inspect
- Review every template condition for mutually exclusive values.
- Check layer, provider, sublayer, and object type together.
- Simplify the template until objects are returned, then add conditions back.
References for STATUS_FWP_NEVER_MATCH
- Microsoft Open Specifications: NTSTATUS values
- Microsoft: Windows Filtering Platform
- Microsoft: WFP filtering layer identifiers
Looking for a different code? Search another status or error code.