General Information
Base Filtering Engine is needed for some functions (HTTP scanning) of ESET NOD32 Antivirtus, and it will complain about it not being available if it is disabled. This service is also needed for proper functionality of ZoneAlarm v9.2.x (free).
Windows 8
Default Description
The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.
Additional Information
None at this time.
Default Startup Type
| OS | SP0 |
|---|---|
| Windows 8 x86 | Automatic (Started) |
| Windows 8 x64 | Automatic (Started) |
| Windows 8 Pro x86 | Automatic (Started) |
| Windows 8 Pro x64 | Automatic (Started) |
| Windows 8 Enterprise x86 | Automatic (Started) |
| Windows 8 Enterprise x64 | Automatic (Started) |
Service Names
Service Name (registry): BFE
Display Name: Base Filtering Engine
Default Path and Command Line Options
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
Log On As
Account: Local Service
Dependencies
Note: No dependencies are listed for any service in the WDP build I used to draft this information.
Windows 7
Default Description
The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.
Additional Information
If you use an external hardware firewall/gateway/router between your computer and the internet, do not use IPsec (VPN tunneling, etc) and Internet Connection Sharing (ICS), then this service and the following group of services can be disabled:
- Base Filtering Engine
- IKE and AuthIP IPsec Keying Modules
- Internet Connection Sharing (ICS)
- IPsec Policy Agent
- Routing and Remote Access
- Windows Firewall
I highly recommend that you do not disable the Windows Firewall unless you use a different software firewall or external hardware solution, but the services listed above are all involved with each other.
Default Startup Type
| OS | SP0 | SP1 |
|---|---|---|
| Windows 7 Starter | Automatic (Started) | Automatic (Started) |
| Windows 7 Home Basic | Automatic (Started) | Automatic (Started) |
| Windows 7 Home Premium | Automatic (Started) | Automatic (Started) |
| Windows 7 Professional | Automatic (Started) | Automatic (Started) |
| Windows 7 Ultimate | Automatic (Started) | Automatic (Started) |
| Windows 7 Enterprise | Automatic (Started) | Automatic (Started) |
Service Names
Service Name (registry): BFE
Display Name: Base Filtering Engine
Default Path and Command Line Options
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
Log On As
Account: Local Service
Dependencies
What service Base Filtering Engine needs to function properly:
-
Remote Procedure Call (RPC)(S, HB, HP, P, U, E)
- DCOM Server Process Launcher (S, HB, HP, P, U, E)
- RPC Endpoint Mapper (S, HB, HP, P, U, E)
What other service require Base Filtering Engine to function properly:
- IKE and AuthIP IPsec Keying Modules (S, HB, HP, P, U, E)
- Internet Connection Sharing (ICS) (S, HB, HP, P, U, E)
- IPsec Policy Agent (S, HB, HP, P, U, E)
- Routing and Remote Access (S, HB, HP, P, U, E)
- Windows Firewall (S, HB, HP, P, U, E)
Windows Vista
Default Description
The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.
Additional Information
If you use an external hardware firewall/gateway/router between your computer and the internet, do not use IPsec (VPN tunneling, etc) and Internet Connection Sharing (ICS), then this service and the following group of services can be disabled:
- Base Filtering Engine
- IKE and AuthIP IPsec Keying Modules
- Internet Connection Sharing (ICS)
- IPsec Policy Agent
- Routing and Remote Access
- Windows Firewall
I highly recommend that you do not disable the Windows Firewall unless you use a different software firewall or external hardware solution, but the services listed above are all involved with each other.
Default Startup Type
| OS | SP0 | SP1 | SP2 |
|---|---|---|---|
| Vista Home Basic | Automatic (Started) | Automatic (Started) | Automatic (Started) |
| Vista Home Premium | Automatic (Started) | Automatic (Started) | Automatic (Started) |
| Vista Business | Automatic (Started) | Automatic (Started) | Automatic (Started) |
| Vista Ultimate | Automatic (Started) | Automatic (Started) | Automatic (Started) |
| Vista Enterprise | Automatic (Started) | Automatic (Started) | Automatic (Started) |
Service Names
Service Name (registry): BFE
Display Name: Base Filtering Engine
Default Path and Command Line Options
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
Log On As
Account: Local Service
Dependencies
What service Base Filtering Engine needs to function properly:
What other service require Base Filtering Engine to function properly:
- IKE and AuthIP IPsec Keying Modules
- Internet Connection Sharing (ICS)
- IPsec Policy Agent
- Routing and Remote Access
- Windows Firewall