WINDOWS SERVICE
BFE: Base Filtering Engine
Manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering.
TECHNICAL SUMMARY
| Service name | BFE |
|---|---|
| Display name | Base Filtering Engine |
| Runs from | C:\Windows\System32\svchost.exe |
| Command line | svchost.exe -k LocalServiceNoNetworkFirewall -p |
| Runs as | LocalService |
| Verdict | Leave it alone |
| Microsoft, Windows Server 2016 guidance | No guidance |
Paths, signer and service account observed on Windows 11 build 26300 on 9 November 2026. Run the commands below to check your own PC.
Should you touch it?
Leave it aloneMicrosoft says stopping or disabling it significantly reduces system security and causes unpredictable behavior in IPsec management and firewall applications.
What PC Tweaker does with it
PC Tweaker does not change this service. No control in the catalogue stops it, disables it or edits its start type.
Check it yourself
See its state and start type
PowerShellGet-Service BFE | Format-List Name, DisplayName, Status, StartType sc qc BFE
Common questions
What does the BFE service do?
Manages firewall and Internet Protocol security (IPsec) policies and implements user mode filtering. It runs C:\Windows\System32\svchost.exe (svchost.exe -k LocalServiceNoNetworkFirewall -p) as LocalService.
Can I disable BFE?
Leave it alone. Microsoft says stopping or disabling it significantly reduces system security and causes unpredictable behavior in IPsec management and firewall applications.