Edit

Share via

IPsecSaContextExpire0 function (fwpmk.h)

  • Article

The IPsecSaContextExpire0 function indicates that an IPsec security association (SA) context should be expired.

Syntax

NTSTATUS IPsecSaContextExpire0(
  [in] HANDLE engineHandle,
  [in] UINT64 id
);

Parameters

[in] engineHandle

Handle for an open session to the filter engine. Call FwpmEngineOpen0 to open a session to the filter engine.

[in] id

A runtime identifier for SA context. This identifier was received from the system when the application called IPsecSaContextCreate0.

Return value

Return code/value Description
ERROR_SUCCESS
0		 The IPsec SA context was successfully expired.
FWP_E_* error code
0x80320001—0x80320039		 A Windows Filtering Platform (WFP) specific error. See WFP Error Codes for details.
RPC_* error code
0x80010001—0x80010122		 Failure to communicate with the remote or local firewall engine.
Other NTSTATUS codes An error occurred.

Remarks

When an SA context is expired, the corresponding outbound SA gets deleted immediately, whereas the inbound SA deletion is postponed for a minute. This allows the processing of any inbound IPsec protected traffic that may still be on the wire.

The caller needs DELETE access to the IPsec security associations database. See Access Control for more information.

IPsecSaContextExpire0 is a specific implementation of IPsecSaContextExpire. See WFP Version-Independent Names and Targeting Specific Versions of Windows for more information.

Requirements

Requirement Value
Minimum supported client Available starting with Windows Vista.
Target Platform Universal
Header fwpmk.h
Library fwpkclnt.lib
IRQL <= PASSIVE_LEVEL

See also