Base Filtering Engine

Default Description:

The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.

Additional Information:

If you use an external hardware firewall/gateway/router between your computer and the internet, do not use IPsec (VPN tunneling, etc) and Internet Connection Sharing (ICS), then this service and the following group of services can be disabled:

• Base Filtering Engine
• IKE and AuthIPsec Keying Modules
• Internet Connection Sharing (ICS)
• IPsec Policy Agent
• Routing and Remote Access
• Windows Firewall

I highly recommend that you do not disable the Windows Firewall, but the services listed above are all involved with each other.

Defaults Startup Type:

Default Vista Home Basic: Automatic (Started)
Default Vista Home Premium: Automatic (Started)
Default Vista Business: Automatic (Started)
Default Vista Ultimate: Automatic (Started)

Other Settings:

Safe Setting: Automatic

Service Names:

Service Name (registry): BFE

Display Name: Base Filtering Engine

Default Path and Command Line Options:

C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork

Log On As:

Account: Local Service

Dependencies:

What service Base Filtering Engine needs to function properly:

• Remote Procedure Call (RPC)
  • DCOM Server Process Launcher

What other service require Base Filtering Engine to function properly:

• IKE and AuthIP IPsec Keying Modules
• Internet Connection Sharing (ICS) **
• IPsec Policy Agent
• Routing and Remote Access
• Windows Firewall