Cisco
Login
Search
Software Secure Workload
Activity Configure

Deploy Software Agents on Workloads Enforce Policies with Agents Agent Enforcement on the Windows Platform in WFP Mode Disable Stealth Mode Filters in WFP Mode

Last updated: Jun 09, 2025

Disable Stealth Mode Filters in WFP Mode

To disable stealth mode filters (port scanning filters):

Procedure

1

Edit \conf\enforcer.cfg.
2

Add disable_wfp_stealth_mode: 1
3

Save the file.
4

With administrative privileges, restart the CswAgent service by:

  1. Run the command: sc.exe cswagent to stop the CswAgent Service.

  2. Run the command: sc.exe cswagent to start the CswAgentService.
5

To verify:

  1. With administrative privileges, run cmd.exe.

  2. Run the command: c:\program files\tetration\tetenf.exe -l -f <-verbose> <-output=outfile.txt>.

 
 
“Tetration Internal Rule block portscan” filters are not configured.
Previous topic Visibility of Configured WFP Filters Next topic Delete Configured WFP Filters