#ipsec

Windows Filtering Platform: The Kernel-Mode Firewall You Don't See

May 11, 2026

The Windows Filtering Platform is the kernel-mode engine under wf.msc, IPsec, WinNAT, the Hyper-V vSwitch, and every modern Windows EDR.