How to Start/Stop Base Filtering Engine service
Service name: BFE
Display name: Base Filtering Engine
Description:
The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user
mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in
unpredictable behavior in IPsec management and firewall applications.
Path to executable:
C:\Windows\system32\svchost.exe -
CMD:
This method shows you how to Start/Stop Base Filtering Engine service from Command Prompt
Please perform the following steps:
Please go to Start and click on the Search programs and files
Type cmd, right click on cmd icon under the Programs and click on Run as administrator
Please confirm User Account Control pop-
Please select, right and copy a registry key from below, then right click on command prompt window, select Paste and press Enter
To Start Base Filtering Engine:
net start BFE
Note: You can’t start a service if Startup type is on Disabled.
To Stop Base Filtering Engine:
net stop BFE
To change Startup type:
Automatic:
REG add "HKLM\SYSTEM\CurrentControlSet\services\BFE" /v Start /t REG_DWORD /d 2 /f
Manual:
REG add "HKLM\SYSTEM\CurrentControlSet\services\BFE" /v Start /t REG_DWORD /d 3 /f
Disabled:
REG add "HKLM\SYSTEM\CurrentControlSet\services\BFE" /v Start /t REG_DWORD /d 4 /f
Automatic (Delayed Start):
REG add "HKLM\SYSTEM\CurrentControlSet\services\BFE" /v Start /t REG_DWORD /d 2 /f
Note: When you change to Automatic (Delayed Start) a new key DelayedAutostart is created with value 1.
REG add "HKLM\SYSTEM\CurrentControlSet\services\BFE" /v DelayedAutostart /t REG_DWORD /d 1 /f
When you change to Automatic from Automatic (Delayed Start), DelayedAutostart change value to 0.
REG add "HKLM\SYSTEM\CurrentControlSet\services\BFE" /v DelayedAutostart /t REG_DWORD /d 0 /f
