Base Filtering Engine - Windows 10 Service
The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in unpredictable behavior in IPsec management and firewall applications.
This service also exists in Windows 11, 8 and Vista.
Startup Type
| Windows 10 version | Home | Pro | Education | Enterprise |
|---|---|---|---|---|
| 1507 | Automatic | Automatic | Automatic | Automatic |
| 1511 | Automatic | Automatic | Automatic | Automatic |
| 1607 | Automatic | Automatic | Automatic | Automatic |
| 1703 | Automatic | Automatic | Automatic | Automatic |
| 1709 | Automatic | Automatic | Automatic | Automatic |
| 1803 | Automatic | Automatic | Automatic | Automatic |
| 1809 | Automatic | Automatic | Automatic | Automatic |
| 1903 | Automatic | Automatic | Automatic | Automatic |
| 1909 | Automatic | Automatic | Automatic | Automatic |
| 2004 | Automatic | Automatic | Automatic | Automatic |
| 20H2 | Automatic | Automatic | Automatic | Automatic |
| 21H1 | Automatic | Automatic | Automatic | Automatic |
| 21H2 | Automatic | Automatic | Automatic | Automatic |
| 22H2 | Automatic | Automatic | Automatic | Automatic |
Default Properties
| Display name: | Base Filtering Engine |
| Service name: | BFE |
| Type: | share |
| Path: | %WinDir%\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p |
| File: | %WinDir%\System32\bfe.dll |
| Error control: | normal |
| Group: | NetworkProvider |
| Object: | NT AUTHORITY\LocalService |
| Privileges: |
|
Default Behavior
The Base Filtering Engine service is running as NT AUTHORITY\LocalService in a shared process of svchost.exe. Other services might run in the same process. If Base Filtering Engine fails to start, the error is logged. Windows 10 startup proceeds, but a message box is displayed informing you that the BFE service has failed to start.
Dependencies
Base Filtering Engine is unable to start, if the Remote Procedure Call (RPC) service is stopped or disabled.
If Base Filtering Engine is stopped, the following services cannot start:
- IKE and AuthIP IPsec Keying Modules
- Internet Connection Sharing (ICS)
- IPsec Policy Agent
- Microsoft Defender Antivirus Network Inspection System Driver
- Network Connectivity Assistant
- Routing and Remote Access
- Windows Defender Firewall
Restore Default Startup Type of Base Filtering Engine
Automated Restore
1. Select your Windows 10 edition and release, and then click on the Download button below.
2. Save the RestoreBaseFilteringEngineWindows10.bat file to any folder on your hard drive.
3. Right-click the downloaded batch file and select Run as administrator.
4. Restart the computer to save changes.
Note. Make sure that the bfe.dll file exists in the %WinDir%\System32 folder. If this file is missing you can try to restore it from your Windows 10 installation media.