Cisco
Login
Search
Software Secure Workload
Activity Configure

Deploy Software Agents on Workloads Enforce Policies with Agents Agent Enforcement on the Windows Platform in WFP Mode Effective Setting and Mixed-List Policies

Last updated: Jun 09, 2025

Effective Setting and Mixed-List Policies

Agent enforcement in WFP mode supports mixed-list or grey list policies.

Consider the mixed-list (both allow and deny) policy example from the Enforcement Agent section:


1. ALLOW 1.2.3.30 tcp port 80-            wt1000
2. BLOCK 1.2.3.0/24 ip-                   wt998
3. ALLOW 1.2.0.0/16 ip-                   wt997
4. Catch-all: DROP ingress, ALLOW egress - wt996

When a packet headed for the host 1.2.3.30 tcp port 80 reaches the firewall, it matches filter 1 and is allowed. However, a packet that is headed for the host 1.2.3.10 is blocked because of filter 2. A packet that is headed for host 1.2.2.10 is allowed by filter 3.

Previous topic Agent WFP support and Windows Firewall Next topic Stateful Enforcement