﻿<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
  <assemblyIdentity name="Networking-MPSSVC-Svc" version="10.0.10586.306" processorArchitecture="amd64" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <dependency discoverable="no" resourceType="Resources">
    <dependentAssembly>
      <assemblyIdentity name="Networking-MPSSVC-Svc.Resources" version="10.0.10586.306" processorArchitecture="amd64" language="*" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
    </dependentAssembly>
  </dependency>
  <file name="MPSSVC.dll" destinationPath="$(runtime.system32)\" sourceName="MPSSVC.dll" sourcePath=".\" importPath="$(build.nttree)\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2">
      <dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">zjBT3rbkUsbc39NxzxE+sNdA3tbBxTfLdJ0b5el/qwk=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <file name="FirewallAPI.dll" destinationPath="$(runtime.system32)\" sourceName="FirewallAPI.dll" sourcePath=".\" importPath="$(build.nttree)\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <signatureInfo xmlns="urn:schemas-microsoft-com:asm.v3">
      <signatureDescriptor pageHash="true" />
    </signatureInfo>
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2">
      <dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">oYCYH1r4d7yqQrGfdkeXP3u8c3dANbyPFgC1cACyJ7M=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <file name="wfapigp.dll" destinationPath="$(runtime.system32)\" sourceName="WFAPIGP.dll" sourcePath=".\" importPath="$(build.nttree)\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2">
      <dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">7+MYZaOigt2O/wak3uoR6Fn555tdaUjzRtmPW67lbNo=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <file name="icfupgd.dll" destinationPath="$(runtime.system32)\" sourceName="icfupgd.dll" sourcePath=".\" importPath="$(build.nttree)\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2">
      <dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">DehTGOOG4To4KhobGXE9v4KtqQl/Z4mRxNPZXvHm1/k=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <file name="fwbase.dll" destinationPath="$(runtime.system32)\" sourceName="fwbase.dll" sourcePath=".\" importPath="$(build.nttree)\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2">
      <dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">pLv0LHvILhQ7I6DWVJsKZ0jyDEpVQD43wh/5280zK/Y=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <file name="fwpolicyiomgr.dll" destinationPath="$(runtime.system32)\" sourceName="fwpolicyiomgr.dll" sourcePath=".\" importPath="$(build.nttree)\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2">
      <dsig:Transforms xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod xmlns:dsig="http://www.w3.org/2000/09/xmldsig#" Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">Ev7R0sL+J6nrRYMMSwhw3S5oXafwm4ucNmFl2WPb+FU=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <directories>
    <directory destinationPath="$(runtime.system32)\LogFiles\Firewall\" owner="true">
      <securityDescriptor name="WindowsFirewallLogFileSecurityDescriptor" />
    </directory>
  </directories>
  <registryKeys>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MPSSvc">
      <registryValue name="" valueType="REG_SZ" value="Service" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ManufacturingMode\Default\Services\MPSSvc">
      <registryValue name="Start" valueType="REG_DWORD" value="0x00000002" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Network Connections">
      <registryValue name="NC_PersonalFirewallConfig" valueType="REG_DWORD" value="0x00000000" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy">
      <registryValue name="IPSecExempt" valueType="REG_DWORD" value="0x00000009" />
      <securityDescriptor name="MpsSvcFirewallPolicySecurity" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedInterfaces\IfIso">
      <securityDescriptor name="MpsSvcFirewallPolicySecurity" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy">
      <registryValue name="IPSecExempt" valueType="REG_DWORD" value="0x00000009" />
      <securityDescriptor name="MpsSvcFirewallPolicySecurity" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules" />
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{0CA545C6-37AD-4A6C-BF92-9F7610067EF5}\">
      <registryValue name="" valueType="REG_SZ" value="HNetCfg.FwOpenPort" />
      <registryValue name="AppID" valueType="REG_SZ" value="{0CA545C6-37AD-4A6C-BF92-9F7610067EF5}" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{0CA545C6-37AD-4A6C-BF92-9F7610067EF5}\InprocServer32\">
      <registryValue name="" valueType="REG_SZ" value="$(runtime.system32)\FirewallAPI.dll" />
      <registryValue name="ThreadingModel" valueType="REG_SZ" value="Both" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{0CA545C6-37AD-4A6C-BF92-9F7610067EF5}\Elevation\">
      <registryValue name="Enabled" valueType="REG_DWORD" value="0x00000001" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{0CA545C6-37AD-4A6C-BF92-9F7610067EF5}\ProgID\">
      <registryValue name="" valueType="REG_SZ" value="HNetCfg.FwOpenPort" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{2C5BC43E-3369-4C33-AB0C-BE9469677AF4}\">
      <registryValue name="" valueType="REG_SZ" value="HNetCfg.FwRule" />
      <registryValue name="AppID" valueType="REG_SZ" value="{2C5BC43E-3369-4C33-AB0C-BE9469677AF4}" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{2C5BC43E-3369-4C33-AB0C-BE9469677AF4}\InprocServer32\">
      <registryValue name="" valueType="REG_SZ" value="$(runtime.system32)\FirewallAPI.dll" />
      <registryValue name="ThreadingModel" valueType="REG_SZ" value="Both" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{2C5BC43E-3369-4C33-AB0C-BE9469677AF4}\Elevation\">
      <registryValue name="Enabled" valueType="REG_DWORD" value="0x00000001" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{2C5BC43E-3369-4C33-AB0C-BE9469677AF4}\ProgID\">
      <registryValue name="" valueType="REG_SZ" value="HNetCfg.FwRule" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{304CE942-6E39-40D8-943A-B913C40C9CD4}\">
      <registryValue name="" valueType="REG_SZ" value="HNetCfg.FwMgr" />
      <registryValue name="AppID" valueType="REG_SZ" value="{304CE942-6E39-40D8-943A-B913C40C9CD4}" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{304CE942-6E39-40D8-943A-B913C40C9CD4}\InprocServer32\">
      <registryValue name="" valueType="REG_SZ" value="$(runtime.system32)\FirewallAPI.dll" />
      <registryValue name="ThreadingModel" valueType="REG_SZ" value="Both" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{304CE942-6E39-40D8-943A-B913C40C9CD4}\Elevation\">
      <registryValue name="Enabled" valueType="REG_DWORD" value="0x00000001" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{304CE942-6E39-40D8-943A-B913C40C9CD4}\ProgID\">
      <registryValue name="" valueType="REG_SZ" value="HNetCfg.FwMgr" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{9D745ED8-C514-4D1D-BF42-751FED2D5AC7}\">
      <registryValue name="" valueType="REG_SZ" value="HNetCfg.FwProduct" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{9D745ED8-C514-4D1D-BF42-751FED2D5AC7}\InprocServer32\">
      <registryValue name="" valueType="REG_SZ" value="$(runtime.system32)\FirewallAPI.dll" />
      <registryValue name="ThreadingModel" valueType="REG_SZ" value="Both" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{9D745ED8-C514-4D1D-BF42-751FED2D5AC7}\ProgID\">
      <registryValue name="" valueType="REG_SZ" value="HNetCfg.FwProduct" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{A6207B2E-7CDD-426A-951E-5E1CBC5AFEAD}\">
      <registryValue name="" valueType="REG_SZ" value="PSFactoryBuffer" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{A6207B2E-7CDD-426A-951E-5E1CBC5AFEAD}\InProcServer32\">
      <registryValue name="" valueType="REG_SZ" value="$(runtime.system32)\FirewallAPI.dll" />
      <registryValue name="ThreadingModel" valueType="REG_SZ" value="Both" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{CC19079B-8272-4D73-BB70-CDB533527B61}\">
      <registryValue name="" valueType="REG_SZ" value="HNetCfg.FwProducts" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{CC19079B-8272-4D73-BB70-CDB533527B61}\InprocServer32\">
      <registryValue name="" valueType="REG_SZ" value="$(runtime.system32)\FirewallAPI.dll" />
      <registryValue name="ThreadingModel" valueType="REG_SZ" value="Both" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{CC19079B-8272-4D73-BB70-CDB533527B61}\ProgID\">
      <registryValue name="" valueType="REG_SZ" value="HNetCfg.FwProducts" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{E2B3C97F-6AE1-41AC-817A-F6F92166D7DD}\">
      <registryValue name="" valueType="REG_SZ" value="HNetCfg.FwPolicy2" />
      <registryValue name="AppID" valueType="REG_SZ" value="{E2B3C97F-6AE1-41AC-817A-F6F92166D7DD}" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{E2B3C97F-6AE1-41AC-817A-F6F92166D7DD}\InprocServer32\">
      <registryValue name="" valueType="REG_SZ" value="$(runtime.system32)\FirewallAPI.dll" />
      <registryValue name="ThreadingModel" valueType="REG_SZ" value="Both" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{E2B3C97F-6AE1-41AC-817A-F6F92166D7DD}\Elevation\">
      <registryValue name="Enabled" valueType="REG_DWORD" value="0x00000001" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{E2B3C97F-6AE1-41AC-817A-F6F92166D7DD}\ProgID\">
      <registryValue name="" valueType="REG_SZ" value="HNetCfg.FwPolicy2" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{EC9846B3-2762-4A6B-A214-6ACB603462D2}\">
      <registryValue name="" valueType="REG_SZ" value="HNetCfg.FwAuthorizedApplication" />
      <registryValue name="AppID" valueType="REG_SZ" value="{EC9846B3-2762-4A6B-A214-6ACB603462D2}" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{EC9846B3-2762-4A6B-A214-6ACB603462D2}\InprocServer32\">
      <registryValue name="" valueType="REG_SZ" value="$(runtime.system32)\FirewallAPI.dll" />
      <registryValue name="ThreadingModel" valueType="REG_SZ" value="Both" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{EC9846B3-2762-4A6B-A214-6ACB603462D2}\Elevation\">
      <registryValue name="Enabled" valueType="REG_DWORD" value="0x00000001" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{EC9846B3-2762-4A6B-A214-6ACB603462D2}\ProgID\">
      <registryValue name="" valueType="REG_SZ" value="HNetCfg.FwAuthorizedApplication" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\HNetCfg.FwAuthorizedApplication\">
      <registryValue name="" valueType="REG_SZ" value="HNetCfg.FwAuthorizedApplication" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\HNetCfg.FwAuthorizedApplication\CLSID\">
      <registryValue name="" valueType="REG_SZ" value="{EC9846B3-2762-4A6B-A214-6ACB603462D2}" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\HNetCfg.FwMgr\">
      <registryValue name="" valueType="REG_SZ" value="HNetCfg.FwMgr" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\HNetCfg.FwMgr\CLSID\">
      <registryValue name="" valueType="REG_SZ" value="{304CE942-6E39-40D8-943A-B913C40C9CD4}" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\HNetCfg.FwOpenPort\">
      <registryValue name="" valueType="REG_SZ" value="HNetCfg.FwOpenPort" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\HNetCfg.FwOpenPort\CLSID\">
      <registryValue name="" valueType="REG_SZ" value="{0CA545C6-37AD-4A6C-BF92-9F7610067EF5}" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\HNetCfg.FwPolicy2\">
      <registryValue name="" valueType="REG_SZ" value="HNetCfg.FwPolicy2" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\HNetCfg.FwPolicy2\CLSID\">
      <registryValue name="" valueType="REG_SZ" value="{E2B3C97F-6AE1-41AC-817A-F6F92166D7DD}" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\HNetCfg.FwProduct\">
      <registryValue name="" valueType="REG_SZ" value="HNetCfg.FwProduct" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\HNetCfg.FwProduct\CLSID\">
      <registryValue name="" valueType="REG_SZ" value="{9D745ED8-C514-4D1D-BF42-751FED2D5AC7}" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\HNetCfg.FwProducts\">
      <registryValue name="" valueType="REG_SZ" value="HNetCfg.FwProducts" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\HNetCfg.FwProducts\CLSID\">
      <registryValue name="" valueType="REG_SZ" value="{CC19079B-8272-4D73-BB70-CDB533527B61}" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\HNetCfg.FwRule\">
      <registryValue name="" valueType="REG_SZ" value="HNetCfg.FwRule" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\HNetCfg.FwRule\CLSID\">
      <registryValue name="" valueType="REG_SZ" value="{2C5BC43E-3369-4C33-AB0C-BE9469677AF4}" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{174A0DDA-E9F9-449D-993B-21AB667CA456}\">
      <registryValue name="" valueType="REG_SZ" value="INetFwProfile" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{174A0DDA-E9F9-449D-993B-21AB667CA456}\ProxyStubClsid\">
      <registryValue name="" valueType="REG_SZ" value="{00020424-0000-0000-C000-000000000046}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{174A0DDA-E9F9-449D-993B-21AB667CA456}\ProxyStubClsid32\">
      <registryValue name="" valueType="REG_SZ" value="{A6207B2E-7CDD-426A-951E-5E1CBC5AFEAD}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{174A0DDA-E9F9-449D-993B-21AB667CA456}\TypeLib\">
      <registryValue name="" valueType="REG_SZ" value="{58FBCF7C-E7A9-467C-80B3-FC65E8FCCA08}" />
      <registryValue name="Version" valueType="REG_SZ" value="1.0" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{644EFD52-CCF9-486C-97A2-39F352570B30}\">
      <registryValue name="" valueType="REG_SZ" value="INetFwAuthorizedApplications" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{644EFD52-CCF9-486C-97A2-39F352570B30}\ProxyStubClsid\">
      <registryValue name="" valueType="REG_SZ" value="{00020424-0000-0000-C000-000000000046}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{644EFD52-CCF9-486C-97A2-39F352570B30}\ProxyStubClsid32\">
      <registryValue name="" valueType="REG_SZ" value="{A6207B2E-7CDD-426A-951E-5E1CBC5AFEAD}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{644EFD52-CCF9-486C-97A2-39F352570B30}\TypeLib\">
      <registryValue name="" valueType="REG_SZ" value="{58FBCF7C-E7A9-467C-80B3-FC65E8FCCA08}" />
      <registryValue name="Version" valueType="REG_SZ" value="1.0" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{79649BB4-903E-421B-94C9-79848E79F6EE}\">
      <registryValue name="" valueType="REG_SZ" value="INetFwServices" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{79649BB4-903E-421B-94C9-79848E79F6EE}\ProxyStubClsid\">
      <registryValue name="" valueType="REG_SZ" value="{00020424-0000-0000-C000-000000000046}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{79649BB4-903E-421B-94C9-79848E79F6EE}\ProxyStubClsid32\">
      <registryValue name="" valueType="REG_SZ" value="{A6207B2E-7CDD-426A-951E-5E1CBC5AFEAD}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{79649BB4-903E-421B-94C9-79848E79F6EE}\TypeLib\">
      <registryValue name="" valueType="REG_SZ" value="{58FBCF7C-E7A9-467C-80B3-FC65E8FCCA08}" />
      <registryValue name="Version" valueType="REG_SZ" value="1.0" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{79FD57C8-908E-4A36-9888-D5B3F0A444CF}\">
      <registryValue name="" valueType="REG_SZ" value="INetFwService" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{79FD57C8-908E-4A36-9888-D5B3F0A444CF}\ProxyStubClsid\">
      <registryValue name="" valueType="REG_SZ" value="{00020424-0000-0000-C000-000000000046}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{79FD57C8-908E-4A36-9888-D5B3F0A444CF}\ProxyStubClsid32\">
      <registryValue name="" valueType="REG_SZ" value="{A6207B2E-7CDD-426A-951E-5E1CBC5AFEAD}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{79FD57C8-908E-4A36-9888-D5B3F0A444CF}\TypeLib\">
      <registryValue name="" valueType="REG_SZ" value="{58FBCF7C-E7A9-467C-80B3-FC65E8FCCA08}" />
      <registryValue name="Version" valueType="REG_SZ" value="1.0" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{8267BBE3-F890-491C-B7B6-2DB1EF0E5D2B}\">
      <registryValue name="" valueType="REG_SZ" value="INetFwServiceRestriction" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{8267BBE3-F890-491C-B7B6-2DB1EF0E5D2B}\ProxyStubClsid32\">
      <registryValue name="" valueType="REG_SZ" value="{00020424-0000-0000-C000-000000000046}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{8267BBE3-F890-491C-B7B6-2DB1EF0E5D2B}\TypeLib\">
      <registryValue name="" valueType="REG_SZ" value="{58FBCF7C-E7A9-467C-80B3-FC65E8FCCA08}" />
      <registryValue name="Version" valueType="REG_SZ" value="1.0" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{98325047-C671-4174-8D81-DEFCD3F03186}\">
      <registryValue name="" valueType="REG_SZ" value="INetFwPolicy2" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{98325047-C671-4174-8D81-DEFCD3F03186}\ProxyStubClsid32\">
      <registryValue name="" valueType="REG_SZ" value="{00020424-0000-0000-C000-000000000046}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{98325047-C671-4174-8D81-DEFCD3F03186}\TypeLib\">
      <registryValue name="" valueType="REG_SZ" value="{58FBCF7C-E7A9-467C-80B3-FC65E8FCCA08}" />
      <registryValue name="Version" valueType="REG_SZ" value="1.0" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{9C4C6277-5027-441E-AFAE-CA1F542DA009}\">
      <registryValue name="" valueType="REG_SZ" value="INetFwRules" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{9C4C6277-5027-441E-AFAE-CA1F542DA009}\ProxyStubClsid32\">
      <registryValue name="" valueType="REG_SZ" value="{00020424-0000-0000-C000-000000000046}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{9C4C6277-5027-441E-AFAE-CA1F542DA009}\TypeLib\">
      <registryValue name="" valueType="REG_SZ" value="{58FBCF7C-E7A9-467C-80B3-FC65E8FCCA08}" />
      <registryValue name="Version" valueType="REG_SZ" value="1.0" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{A6207B2E-7CDD-426A-951E-5E1CBC5AFEAD}\">
      <registryValue name="" valueType="REG_SZ" value="INetFwIcmpSettings" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{A6207B2E-7CDD-426A-951E-5E1CBC5AFEAD}\ProxyStubClsid\">
      <registryValue name="" valueType="REG_SZ" value="{00020424-0000-0000-C000-000000000046}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{A6207B2E-7CDD-426A-951E-5E1CBC5AFEAD}\ProxyStubClsid32\">
      <registryValue name="" valueType="REG_SZ" value="{A6207B2E-7CDD-426A-951E-5E1CBC5AFEAD}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{A6207B2E-7CDD-426A-951E-5E1CBC5AFEAD}\TypeLib\">
      <registryValue name="" valueType="REG_SZ" value="{58FBCF7C-E7A9-467C-80B3-FC65E8FCCA08}" />
      <registryValue name="Version" valueType="REG_SZ" value="1.0" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{AF230D27-BABA-4E42-ACED-F524F22CFCE2}\">
      <registryValue name="" valueType="REG_SZ" value="INetFwRule" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{AF230D27-BABA-4E42-ACED-F524F22CFCE2}\ProxyStubClsid32\">
      <registryValue name="" valueType="REG_SZ" value="{00020424-0000-0000-C000-000000000046}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{AF230D27-BABA-4E42-ACED-F524F22CFCE2}\TypeLib\">
      <registryValue name="" valueType="REG_SZ" value="{58FBCF7C-E7A9-467C-80B3-FC65E8FCCA08}" />
      <registryValue name="Version" valueType="REG_SZ" value="1.0" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{9C27C8DA-189B-4DDE-89F7-8B39A316782C}\">
      <registryValue name="" valueType="REG_SZ" value="INetFwRule2" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{9C27C8DA-189B-4DDE-89F7-8B39A316782C}\ProxyStubClsid32\">
      <registryValue name="" valueType="REG_SZ" value="{00020424-0000-0000-C000-000000000046}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{9C27C8DA-189B-4DDE-89F7-8B39A316782C}\TypeLib\">
      <registryValue name="" valueType="REG_SZ" value="{58FBCF7C-E7A9-467C-80B3-FC65E8FCCA08}" />
      <registryValue name="Version" valueType="REG_SZ" value="1.0" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{B21563FF-D696-4222-AB46-4E89B73AB34A}\">
      <registryValue name="" valueType="REG_SZ" value="INetFwRule3" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{B21563FF-D696-4222-AB46-4E89B73AB34A}\ProxyStubClsid32\">
      <registryValue name="" valueType="REG_SZ" value="{00020424-0000-0000-C000-000000000046}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{B21563FF-D696-4222-AB46-4E89B73AB34A}\TypeLib\">
      <registryValue name="" valueType="REG_SZ" value="{58FBCF7C-E7A9-467C-80B3-FC65E8FCCA08}" />
      <registryValue name="Version" valueType="REG_SZ" value="1.0" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{B5E64FFA-C2C5-444E-A301-FB5E00018050}\">
      <registryValue name="" valueType="REG_SZ" value="INetFwAuthorizedApplication" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{B5E64FFA-C2C5-444E-A301-FB5E00018050}\ProxyStubClsid\">
      <registryValue name="" valueType="REG_SZ" value="{00020424-0000-0000-C000-000000000046}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{B5E64FFA-C2C5-444E-A301-FB5E00018050}\ProxyStubClsid32\">
      <registryValue name="" valueType="REG_SZ" value="{A6207B2E-7CDD-426A-951E-5E1CBC5AFEAD}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{B5E64FFA-C2C5-444E-A301-FB5E00018050}\TypeLib\">
      <registryValue name="" valueType="REG_SZ" value="{58FBCF7C-E7A9-467C-80B3-FC65E8FCCA08}" />
      <registryValue name="Version" valueType="REG_SZ" value="1.0" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{C0E9D7FA-E07E-430A-B19A-090CE82D92E2}\">
      <registryValue name="" valueType="REG_SZ" value="INetFwOpenPorts" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{C0E9D7FA-E07E-430A-B19A-090CE82D92E2}\ProxyStubClsid\">
      <registryValue name="" valueType="REG_SZ" value="{00020424-0000-0000-C000-000000000046}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{C0E9D7FA-E07E-430A-B19A-090CE82D92E2}\ProxyStubClsid32\">
      <registryValue name="" valueType="REG_SZ" value="{A6207B2E-7CDD-426A-951E-5E1CBC5AFEAD}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{C0E9D7FA-E07E-430A-B19A-090CE82D92E2}\TypeLib\">
      <registryValue name="" valueType="REG_SZ" value="{58FBCF7C-E7A9-467C-80B3-FC65E8FCCA08}" />
      <registryValue name="Version" valueType="REG_SZ" value="1.0" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{D46D2478-9AC9-4008-9DC7-5563CE5536CC}\">
      <registryValue name="" valueType="REG_SZ" value="INetFwPolicy" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{D46D2478-9AC9-4008-9DC7-5563CE5536CC}\ProxyStubClsid\">
      <registryValue name="" valueType="REG_SZ" value="{00020424-0000-0000-C000-000000000046}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{D46D2478-9AC9-4008-9DC7-5563CE5536CC}\ProxyStubClsid32\">
      <registryValue name="" valueType="REG_SZ" value="{A6207B2E-7CDD-426A-951E-5E1CBC5AFEAD}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{D46D2478-9AC9-4008-9DC7-5563CE5536CC}\TypeLib\">
      <registryValue name="" valueType="REG_SZ" value="{58FBCF7C-E7A9-467C-80B3-FC65E8FCCA08}" />
      <registryValue name="Version" valueType="REG_SZ" value="1.0" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{D4BECDDF-6F73-4A83-B832-9C66874CD20E}\">
      <registryValue name="" valueType="REG_SZ" value="INetFwRemoteAdminSettings" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{D4BECDDF-6F73-4A83-B832-9C66874CD20E}\ProxyStubClsid\">
      <registryValue name="" valueType="REG_SZ" value="{00020424-0000-0000-C000-000000000046}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{D4BECDDF-6F73-4A83-B832-9C66874CD20E}\ProxyStubClsid32\">
      <registryValue name="" valueType="REG_SZ" value="{A6207B2E-7CDD-426A-951E-5E1CBC5AFEAD}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{D4BECDDF-6F73-4A83-B832-9C66874CD20E}\TypeLib\">
      <registryValue name="" valueType="REG_SZ" value="{58FBCF7C-E7A9-467C-80B3-FC65E8FCCA08}" />
      <registryValue name="Version" valueType="REG_SZ" value="1.0" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{E0483BA0-47FF-4D9C-A6D6-7741D0B195F7}\">
      <registryValue name="" valueType="REG_SZ" value="INetFwOpenPort" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{E0483BA0-47FF-4D9C-A6D6-7741D0B195F7}\ProxyStubClsid\">
      <registryValue name="" valueType="REG_SZ" value="{00020424-0000-0000-C000-000000000046}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{E0483BA0-47FF-4D9C-A6D6-7741D0B195F7}\ProxyStubClsid32\">
      <registryValue name="" valueType="REG_SZ" value="{A6207B2E-7CDD-426A-951E-5E1CBC5AFEAD}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{E0483BA0-47FF-4D9C-A6D6-7741D0B195F7}\TypeLib\">
      <registryValue name="" valueType="REG_SZ" value="{58FBCF7C-E7A9-467C-80B3-FC65E8FCCA08}" />
      <registryValue name="Version" valueType="REG_SZ" value="1.0" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{F7898AF5-CAC4-4632-A2EC-DA06E5111AF2}\">
      <registryValue name="" valueType="REG_SZ" value="INetFwMgr" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{F7898AF5-CAC4-4632-A2EC-DA06E5111AF2}\ProxyStubClsid\">
      <registryValue name="" valueType="REG_SZ" value="{00020424-0000-0000-C000-000000000046}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{F7898AF5-CAC4-4632-A2EC-DA06E5111AF2}\ProxyStubClsid32\">
      <registryValue name="" valueType="REG_SZ" value="{A6207B2E-7CDD-426A-951E-5E1CBC5AFEAD}" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\Interface\{F7898AF5-CAC4-4632-A2EC-DA06E5111AF2}\TypeLib\">
      <registryValue name="" valueType="REG_SZ" value="{58FBCF7C-E7A9-467C-80B3-FC65E8FCCA08}" />
      <registryValue name="Version" valueType="REG_SZ" value="1.0" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\TypeLib\{58FBCF7C-E7A9-467C-80B3-FC65E8FCCA08}\1.0\">
      <registryValue name="" valueType="REG_SZ" value="NetFwTypeLib" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\TypeLib\{58FBCF7C-E7A9-467C-80B3-FC65E8FCCA08}\1.0\0\win64\">
      <registryValue name="" valueType="REG_SZ" value="$(runtime.system32)\FirewallAPI.dll" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\TypeLib\{58FBCF7C-E7A9-467C-80B3-FC65E8FCCA08}\1.0\FLAGS\">
      <registryValue name="" valueType="REG_SZ" value="0" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\TypeLib\{58FBCF7C-E7A9-467C-80B3-FC65E8FCCA08}\1.0\HELPDIR\">
      <registryValue name="" valueType="REG_SZ" value="$(runtime.system32)" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\" />
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\" />
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\" />
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\FirewallAPI\">
      <registryValue name="LogSessionName" valueType="REG_EXPAND_SZ" value="stdout" />
      <registryValue name="Active" valueType="REG_DWORD" value="0x00000001" />
      <registryValue name="ControlFlags" valueType="REG_DWORD" value="0x00000001" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\FirewallAPI\FirewallAPI\">
      <registryValue name="Guid" valueType="REG_SZ" value="28c9f48f-d244-45a8-842f-dc9fbc9b6e92" />
      <registryValue name="BitNames" valueType="REG_SZ" value="TL_ERROR TL_WARN TL_INFO TL_FUNC TL_LOCKS TL_MEMORY TL_REFS TL_RULES TL_DO_ASSERT" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\AppID\{304CE942-6E39-40D8-943A-B913C40C9CD4}\">
      <registryValue name="DllSurrogate" valueType="REG_SZ" value="" />
      <registryValue name="LaunchPermission" valueType="REG_BINARY" value="01000480780000008800000000000000140000000200640004000000000014001F000000010100000000000512000000000018001F00000001020000000000052000000020020000000014001F000000010100000000000504000000000014000B000000010100000000000512000000CDCDCDCDCDCDCDCD0102000000000005200000002002000001020000000000052000000020020000" />
      <registryValue name="AccessPermission" valueType="REG_BINARY" value="010004806000000070000000000000001400000002004C00030000000000140003000000010100000000000512000000000014000700000001010000000000050A0000000000140003000000010100000000000504000000CDCDCDCDCDCDCDCD0102000000000005200000002002000001020000000000052000000020020000" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\AppID\{E2B3C97F-6AE1-41AC-817A-F6F92166D7DD}\">
      <registryValue name="DllSurrogate" valueType="REG_SZ" value="" />
      <registryValue name="LaunchPermission" valueType="REG_BINARY" value="01000480780000008800000000000000140000000200640004000000000014001F000000010100000000000512000000000018001F00000001020000000000052000000020020000000014001F000000010100000000000504000000000014000B000000010100000000000512000000CDCDCDCDCDCDCDCD0102000000000005200000002002000001020000000000052000000020020000" />
      <registryValue name="AccessPermission" valueType="REG_BINARY" value="010004806000000070000000000000001400000002004C00030000000000140003000000010100000000000512000000000014000700000001010000000000050A0000000000140003000000010100000000000504000000CDCDCDCDCDCDCDCD0102000000000005200000002002000001020000000000052000000020020000" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\AppID\{2C5BC43E-3369-4C33-AB0C-BE9469677AF4}\">
      <registryValue name="DllSurrogate" valueType="REG_SZ" value="" />
      <registryValue name="LaunchPermission" valueType="REG_BINARY" value="01000480780000008800000000000000140000000200640004000000000014001F000000010100000000000512000000000018001F00000001020000000000052000000020020000000014001F000000010100000000000504000000000014000B000000010100000000000512000000CDCDCDCDCDCDCDCD0102000000000005200000002002000001020000000000052000000020020000" />
      <registryValue name="AccessPermission" valueType="REG_BINARY" value="010004806000000070000000000000001400000002004C00030000000000140003000000010100000000000512000000000014000700000001010000000000050A0000000000140003000000010100000000000504000000CDCDCDCDCDCDCDCD0102000000000005200000002002000001020000000000052000000020020000" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\AppID\{EC9846B3-2762-4A6B-A214-6ACB603462D2}\">
      <registryValue name="DllSurrogate" valueType="REG_SZ" value="" />
      <registryValue name="LaunchPermission" valueType="REG_BINARY" value="01000480780000008800000000000000140000000200640004000000000014001F000000010100000000000512000000000018001F00000001020000000000052000000020020000000014001F000000010100000000000504000000000014000B000000010100000000000512000000CDCDCDCDCDCDCDCD0102000000000005200000002002000001020000000000052000000020020000" />
      <registryValue name="AccessPermission" valueType="REG_BINARY" value="010004806000000070000000000000001400000002004C00030000000000140003000000010100000000000512000000000014000700000001010000000000050A0000000000140003000000010100000000000504000000CDCDCDCDCDCDCDCD0102000000000005200000002002000001020000000000052000000020020000" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\AppID\{0CA545C6-37AD-4A6C-BF92-9F7610067EF5}\">
      <registryValue name="DllSurrogate" valueType="REG_SZ" value="" />
      <registryValue name="LaunchPermission" valueType="REG_BINARY" value="01000480780000008800000000000000140000000200640004000000000014001F000000010100000000000512000000000018001F00000001020000000000052000000020020000000014001F000000010100000000000504000000000014000B000000010100000000000512000000CDCDCDCDCDCDCDCD0102000000000005200000002002000001020000000000052000000020020000" />
      <registryValue name="AccessPermission" valueType="REG_BINARY" value="010004806000000070000000000000001400000002004C00030000000000140003000000010100000000000512000000000014000700000001010000000000050A0000000000140003000000010100000000000504000000CDCDCDCDCDCDCDCD0102000000000005200000002002000001020000000000052000000020020000" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\System\Currentcontrolset\Services\SharedAccess\Epoch">
      <securityDescriptor name="MpsSvcEpochSecurity" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\System\Currentcontrolset\Services\SharedAccess\Epoch2">
      <securityDescriptor name="MpsSvcEpochSecurity" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\TYPELIB\{58FBCF7C-E7A9-467C-80B3-FC65E8FCCA08}">
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MpsSvc\Security">
      <registryValue name="Security" valueType="REG_BINARY" value="01001480B4000000C0000000140000003000000002001C000100000002801400FF010F00010100000000000100000000020084000500000000001400FD01020001010000000000051200000000001800FF010F0001020000000000052000000020020000000014008D010200010100000000000504000000000014008D010200010100000000000506000000000028001500000001060000000000055000000049599D779156E555DCF4E20EA78BEBCA7B421356010100000000000512000000010100000000000512000000" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\System\CurrentControlset\Services\mpssvc\Parameters">
      <registryValue name="ServiceDll" valueType="REG_EXPAND_SZ" value="%SystemRoot%\system32\mpssvc.dll" />
      <registryValue name="ServiceDllUnloadOnStop" valueType="REG_DWORD" value="0x00000001" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Security">
      <registryValue name="6d013707-52ac-4fb5-828d-539aa8302ce2" valueType="REG_BINARY" value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
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MpsSvc\Parameters\AppCs">
      <securityDescriptor name="MPSSVC_APPC_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MpsSvc\Parameters\ACService">
      <securityDescriptor name="MPSSVC_APPC_SERVICING_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MpsSvc\Parameters\PortKeywords\RPC-EPMap">
      <securityDescriptor name="MPSSVC_RPC_EPMAP_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MpsSvc\Parameters\PortKeywords\Teredo">
      <securityDescriptor name="MPSSVC_TEREDO_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MpsSvc\Parameters\PortKeywords\IPTLSIn">
      <securityDescriptor name="MPSSVC_TEREDO_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MpsSvc\Parameters\PortKeywords\IPTLSOut">
      <securityDescriptor name="MPSSVC_TEREDO_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MpsSvc\Parameters\PortKeywords\DHCP">
      <securityDescriptor name="MPSSVC_DHCP_SDDL" />
    </registryKey>
  </registryKeys>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="MPSSVC_APPC_SDDL" sddl="D:PAI(A;CI;SDGRGW;;;S-1-5-80-3088073201-1464728630-1879813800-1107566885-823218052)(A;OI;CCRP;;;SY)(A;OI;CCRP;;;BA)" operationHint="replace" />
          <securityDescriptorDefinition name="MPSSVC_APPC_SERVICING_SDDL" sddl="D:PAI(A;CI;SDGRGW;;;S-1-5-80-3088073201-1464728630-1879813800-1107566885-823218052)(A;OICI;SDGRGW;;;SY)(A;OICI;SDGRGW;;;BA)" operationHint="replace" />
          <securityDescriptorDefinition name="MPSSVC_DHCP_SDDL" sddl="D:PAI(A;CI;CCDC;;;S-1-5-80-2940520708-3855866260-481812779-327648279-1710889582)(A;CI;CCDC;;;S-1-5-80-3526382388-830156861-4107432654-3665941875-1028450966)(A;CI;CCRP;;;S-1-5-80-3088073201-1464728630-1879813800-1107566885-823218052)(A;OI;CCRP;;;SY)(A;OI;CCRP;;;BA)" operationHint="replace" />
          <securityDescriptorDefinition name="MPSSVC_RPC_EPMAP_SDDL" sddl="D:PAI(A;CI;CCDC;;;S-1-5-80-979556362-403687129-3954533659-2335141334-1547273080)(A;CI;CCRP;;;S-1-5-80-3088073201-1464728630-1879813800-1107566885-823218052)(A;OI;CCRP;;;SY)(A;OI;CCRP;;;BA)" operationHint="replace" />
          <securityDescriptorDefinition name="MPSSVC_TEREDO_SDDL" sddl="D:PAI(A;CI;CCDC;;;S-1-5-80-62724632-2456781206-3863850748-1496050881-1042387526)(A;CI;CCRP;;;S-1-5-80-3088073201-1464728630-1879813800-1107566885-823218052)(A;OI;CCRP;;;SY)(A;OI;CCRP;;;BA)" operationHint="replace" />
          <securityDescriptorDefinition name="MpsSvcEpochSecurity" sddl="D:AI(A;CI;CCDC;;;S-1-5-80-3088073201-1464728630-1879813800-1107566885-823218052)" operationHint="replace" />
          <securityDescriptorDefinition name="MpsSvcFirewallPolicySecurity" sddl="D:AI(A;OICI;SDGRGW;;;S-1-5-80-3088073201-1464728630-1879813800-1107566885-823218052)(A;OICI;SDGRGW;;;SY)(A;OICI;SDGRGW;;;BA)" operationHint="replace" />
          <securityDescriptorDefinition name="MpsSvcServiceSecurity" sddl="O:SYG:SYD:(A;;0x20085;;;AU)(A;;0xe009f;;;SY)(A;;0xe009d;;;BA)(A;;0x85;;;BU)S:(AU;FA;0xf00ff;;;WD)" operationHint="replace" />
          <securityDescriptorDefinition name="WindowsFirewallLogFileSecurityDescriptor" sddl="D:PAI(A;OI;FA;;;S-1-5-80-3088073201-1464728630-1879813800-1107566885-823218052)(A;OI;FA;;;SY)(A;OI;FA;;;BA)" operationHint="replace" />
          <securityDescriptorDefinition name="WRP_FILE_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;GRGX;;;BA)(A;;GRGX;;;SY)(A;;GRGX;;;BU)(A;;GRGX;;;S-1-15-2-1)S:(AU;FASA;0x000D0116;;;WD)" operationHint="replace" description="Default SDDL for Windows Resource Protected file" />
          <securityDescriptorDefinition name="WRP_REGKEY_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CI;GR;;;SY)(A;CI;GR;;;BA)(A;CI;GR;;;BU)(A;CI;GR;;;S-1-15-2-1)" operationHint="replace" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
  <localization>
    <resources culture="en-US">
      <stringTable>
        <string id="ConSecChannel.Name" value="Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurity" />
        <string id="ConSecChannelVerbose.Name" value="Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurityVerbose" />
        <string id="description0" value="Windows Firewall helps protect your computer by preventing unauthorized users from gaining access to your computer through the Internet or a network." />
        <string id="displayName0" value="Windows Firewall" />
        <string id="EdgeTraversal_ValueMap.FW_ALLOW_EDGE_TRAVERAL" value="Allow" />
        <string id="EdgeTraversal_ValueMap.FW_ALLOW_EDGE_TRAVERAL_DEFER_APP" value="Defer to application" />
        <string id="EdgeTraversal_ValueMap.FW_ALLOW_EDGE_TRAVERAL_DEFER_USER" value="Defer to user" />
        <string id="EdgeTraversal_ValueMap.FW_EDGE_TRAVERSAL_NONE" value="None" />
        <string id="Enabled_Disabled_ValueMap.Disabled" value="Disabled" />
        <string id="Enabled_Disabled_ValueMap.Enabled" value="Enabled" />
        <string id="event_SYS_AUDITID_MPSFIREWALL_CALL_UNSUPPORTED" value="An attempt to programmatically disable the Windows Firewall using a call to INetFwProfile.FirewallEnabled(FALSE) interface was rejected because this API is not supported on Windows Vista. This has most likely occurred due to an application which is incompatible with Windows Vista. Please contact the application's vendor to make sure you have a Windows Vista compatible application version.%n%nError Code:%t%tE_NOTIMPL%nCaller Process Name:%t%1%nProcess Id:%t%t%2%nPublisher:%t%t%3" />
        <string id="FirewallProviderName" value="Microsoft-Windows-Firewall" />
        <string id="IPSecThroughNAT_ValueMap.NAT_NEVER" value="Never" />
        <string id="IPSecThroughNAT_ValueMap.NAT_SERVER_AND_CLIENT_BEHIND_NAT" value="Server and client behind NAT" />
        <string id="IPSecThroughNAT_ValueMap.NAT_SERVER_BEHIND_NAT" value="Server behind NAT" />
        <string id="IPVersion_ValueMap.Any" value="Any" />
        <string id="IPVersion_ValueMap.IPv4" value="IPv4" />
        <string id="IPVersion_ValueMap.IPv6" value="IPv6" />
        <string id="MpsClntProviderName" value="Microsoft-Windows-Firewall-Client" />
        <string id="MpsSrvProviderName" value="Microsoft-Windows-Firewall-Service" />
        <string id="MpsSrvProviderNameOperational" value="Microsoft-Windows-Windows Firewall With Advanced Security" />
        <string id="NetIsoCapabilityChangeType_ValueMap.Corp Subnets Change" value="Corp Subnets" />
        <string id="NetIsoCapabilityChangeType_ValueMap.Http Proxies Change" value="Http Proxies" />
        <string id="NetIsoCapabilityChangeType_ValueMap.Local Address Change" value="Local Address Change" />
        <string id="NetIsoCapabilityChangeType_ValueMap.Network Profile Change" value="Network Profile Change" />
        <string id="NetIsoCapabilityDefinitionChangedEventMessage" value="Capability Changed%n%nReason: %t%1%n%nCapability:%t%2%nProfile:%t%3%nIP Range Definition:%t%4" />
        <string id="NetIsoCapabilityType_ValueMap.Internet" value="Internet" />
        <string id="NetIsoCapabilityType_ValueMap.PrivateNetwork" value="PrivateNetwork" />
        <string id="NetIsoCapabilityType_ValueMap.Proximity" value="Proximity" />
        <string id="NetIsoCapabilityType_ValueMap.RemotePrivateNetwork" value="DA Remote PrivateNetwork" />
        <string id="NetIsoHttpProxyChangedEventMessage" value="Http Proxies Changed%n%nReason: %t%1%n%nAll Proxies:%t%2%n%nAll Domain Proxies:%t%3%n%nGroup Policy Configured Domain Proxies:%t%4%n%nGroup Policy Configured Local Proxies:%t%5%n%nAll DA Nat64 Domain Proxies:%t%6%n%nGroup Policy is authoritative:%t%7%n" />
        <string id="NetIsoHttpProxyChangeType_ValueMap.GP_Change" value="Group Policy Change" />
        <string id="NetIsoHttpProxyChangeType_ValueMap.Indication Change" value="Indication Change" />
        <string id="NetIsoHttpProxyChangeType_ValueMap.Manual Change" value="Manual Change" />
        <string id="NetIsoHttpProxyChangeType_ValueMap.Network Change" value="Network Change" />
        <string id="NetIsoHttpProxyChangeType_ValueMap.Subscription Refresh" value="Subscription Refresh" />
        <string id="NetIsoSubnetsChangedEventMessage" value="Corp Subnets Changed%n%nReason: %t%1%n%nAll Domain Subnets:%t%2%n%nGroup Policy Configured Domain Subnets:%t%3%n%nAll DA Nat64 Domain Subnets:%t%4%n%nGroup Policy is authoritative:%t%5%n" />
        <string id="NetIsoSubnetsChangeType_ValueMap.AD Subnets Change" value="AD Subnets Change" />
        <string id="NetIsoSubnetsChangeType_ValueMap.GP Change" value="Group Policy Change" />
        <string id="NetIsoSubnetsChangeType_ValueMap.Local Address Change" value="Local Address Change" />
        <string id="NetIsoSubnetsChangeType_ValueMap.Subscription Refresh" value="Subscription Refresh" />
        <string id="NetworkIsolationOperational.Name" value="Network Isolation Operational" />
        <string id="OperationalChannel.Name" value="Microsoft-Windows-Windows Firewall With Advanced Security/Firewall" />
        <string id="OperationalChannelVerbose.Name" value="Microsoft-Windows-Windows Firewall With Advanced Security/FirewallVerbose" />
        <string id="Protocol_ValueMap.Any" value="Any" />
        <string id="Protocol_ValueMap.ICMPV4" value="ICMP V4" />
        <string id="Protocol_ValueMap.ICMPV6" value="ICMP V6" />
        <string id="Protocol_ValueMap.TCP" value="TCP" />
        <string id="Protocol_ValueMap.UDP" value="UDP" />
        <string id="QU_NotShown_Reason_ValueMap.QU_NOT_SHOWN_REASON_BLOCK_INBOUND" value="All Inbound connections are disallowed" />
        <string id="QU_NotShown_Reason_ValueMap.QU_NOT_SHOWN_REASON_BLOCK_INBOUND_AND_INBOUND_NOTIFY_DISABLED" value="All Inbound connections are disallowed, Inbound notifications are not enabled" />
        <string id="QU_NotShown_Reason_ValueMap.QU_NOT_SHOWN_REASON_BLOCK_LISTED_IMAGE" value="The image is block listed" />
        <string id="QU_NotShown_Reason_ValueMap.QU_NOT_SHOWN_REASON_FIREWALL_OFF" value="The firewall is off and the application is allowed" />
        <string id="QU_NotShown_Reason_ValueMap.QU_NOT_SHOWN_REASON_INACTIVE_SESSION" value="The session is inactive" />
        <string id="QU_NotShown_Reason_ValueMap.QU_NOT_SHOWN_REASON_INBOUND_NOTIFY_DISABLED" value="Inbound notifications are not enabled" />
        <string id="QU_NotShown_Reason_ValueMap.QU_NOT_SHOWN_REASON_NON_INTERACTIVE_APP" value="The application is non interactive" />
        <string id="QU_NotShown_Reason_ValueMap.QU_NOT_SHOWN_REASON_RUNTIME_ERROR" value="An unknown error occurred" />
        <string id="QU_NotShown_Reason_ValueMap.QU_NOT_SHOWN_REASON_SYSTEM_SERVICE" value="The application is a system service" />
        <string id="SecurityOptions_ValueMap.FW_SECURITY_AUTHENTICATE" value="Require Authentication" />
        <string id="SecurityOptions_ValueMap.FW_SECURITY_AUTHENTICATE_ENCRYPT" value="Require Encryption" />
        <string id="SecurityOptions_ValueMap.FW_SECURITY_AUTHENTICATE_NEGO_ENCRYPTION" value="Require Authentication, Negotiate Encryption" />
        <string id="SecurityOptions_ValueMap.FW_SECURITY_AUTHENTICATE_NO_ENCAP" value="Require Authentication, Allow no encapsulation" />
        <string id="SecurityOptions_ValueMap.FW_SECURITY_NONE" value="None" />
        <string id="WFAction_ValueMap.FW_RULE_ACTION_ALLOW" value="Allow" />
        <string id="WFAction_ValueMap.FW_RULE_ACTION_ALLOW_BYPASS" value="Authenticated IPSec Bypass" />
        <string id="WFAction_ValueMap.FW_RULE_ACTION_BLOCK" value="Block" />
        <string id="WFAllAuthenticationSetsDeletedEventMessage" value="All authentication sets have been deleted from the IPsec configuration on this computer.%n%n%tIPsec Phase:%t%1%n%tStore Type:%t%2%n%tModifyingUser:%t%3%n%tModifyingApplication:%t%4" />
        <string id="WFAllCryptoSetsDeletedEventMessage" value="All crypto sets have been deleted from the IPsec configuration on this computer.%n%n%tIPsec Phase:%t%1%n%tStore Type:%t%2%n%tModifyingUser:%t%3%n%tModifyingApplication:%t%4" />
        <string id="WFAllCSRulesDeletedEventMessage" value="All connection security rules have been deleted from the IPsec configuration on this computer.%n%n%tStore Type:%t%1%n%tModifyingUser:%t%2%n%tModifyingApplication:%t%3" />
        <string id="WFAllFirewallRulesDeletedEventMessage" value="All rules have been deleted from the Windows Firewall configuration on this computer.%n%n%tStore Type:%t%1%n%tModifyingUser:%t%2%n%tModifyingApplication:%t%3" />
        <string id="WFAllMMRulesDeletedEventMessage" value="All main mode rules have been deleted from the IPsec configuration on this computer.%n%n%tStore Type:%t%1%n%tModifyingUser:%t%2%n%tModifyingApplication:%t%3" />
        <string id="WFAllowBlock_ValueMap.Allow" value="Allow" />
        <string id="WFAllowBlock_ValueMap.Block" value="Block" />
        <string id="WFAuthenticationSetAddEventMessage" value="An authentication set has been added to IPsec settings.%n%n%tSet ID:%t%1%n%tSet Name:%t%2%n%tIPsec Phase:%t%3%n%tOrigin:%t%5%n%tNumSuites:%t%7%n%tModifyingUser:%t%10%n%tModifyingApplication:%t%11" />
        <string id="WFAuthenticationSetChangeEventMessage" value="An authentication set has been modified in IPsec settings.%n%n%tSet ID:%t%1%n%tSet Name:%t%2%n%tIPsec Phase:%t%3%n%tOrigin:%t%5%n%tNumSuites:%t%7%n%tModifyingUser:%t%10%n%tModifyingApplication:%t%11" />
        <string id="WFAuthenticationSetDeleteEventMessage" value="An authentication set has been deleted from IPsec settings.%n%nDeleted Rule:%n%tRule ID:%t%1%n%tRule Name:%t%2%n%tModifying User:%t%3%n%tModifying Application:%t%4" />
        <string id="WFAuthenticationSetStartupAddEventMessage" value="An authentication set has been added to IPsec settings when Windows Firewall started.%n%n%tSet ID:%t%1%n%tSet Name:%t%2%n%tIPsec Phase:%t%3%n%tOrigin:%t%5%n%tNumSuites:%t%7%n%tModifyingUser:%t%10%n%tModifyingApplication:%t%11" />
        <string id="WFCRL_ValueMap.Check" value="Check" />
        <string id="WFCRL_ValueMap.Disabled" value="Disabled" />
        <string id="WFCRL_ValueMap.Enforce" value="Enforce" />
        <string id="WFCSAction_ValueMap.FW_CS_RULE_ACTION_BOUNDARY" value="Request authentication for inbound and outbound connections" />
        <string id="WFCSAction_ValueMap.FW_CS_RULE_ACTION_DO_NOT_SECURE" value="Do not authenticate" />
        <string id="WFCSAction_ValueMap.FW_CS_RULE_ACTION_SECURE" value="Require authentication for inbound and outbound connections" />
        <string id="WFCSAction_ValueMap.FW_CS_RULE_ACTION_SECURE_SERVER" value="Require authentication for inbound connections and request authentication for outbound connections" />
        <string id="WFCSRuleAddEventMessage" value="A connection security rule was added to IPsec settings.%n%n%tRule ID:%t%1%n%tRule Name:%t%2%n%tOrigin:%t%3%n%tActive:%t%4%n%tProtocol:%t%5%n%tEndPoint1Ports:%t%6%n%tEndPoint2Ports:%t%7%n%tLocalTunnelEndpointV4:%t%8%n%tLocalTunnelEndpointV6:%t%9%n%tRemoteTunnelEndpointV4:%t%10%n%tRemoteTunnelEndpointV6:%t%11%n%tPhase1AuthSetId:%t%12%n%tPhase2AuthSetId:%t%13%n%tPhase2CryptoSetId:%t%14%n%tAction:%t%15%n%tProfiles:%t%16%n%tLocalAddresses:%t%17%n%tRemoteAddresses:%t%18%n%tEmbeddedContext:%t%20%n%tIsDTM:%t%22%n%tApplyAuthZ:%t%23%n%tBypassTunnelIfEncrypted:%t%24%n%tNoIPSecOnOutbound:%t%25%n%tModifyingUser:%t%26%n%tModifyingApplication:%t%27" />
        <string id="WFCSRuleChangeEventMessage" value="A connection security rule was modified in IPsec settings.%n%n%tRule ID:%t%1%n%tRule Name:%t%2%n%tOrigin:%t%3%n%tActive:%t%4%n%tProtocol:%t%5%n%tEndPoint1Ports:%t%6%n%tEndPoint2Ports:%t%7%n%tLocalTunnelEndpointV4:%t%8%n%tLocalTunnelEndpointV6:%t%9%n%tRemoteTunnelEndpointV4:%t%10%n%tRemoteTunnelEndpointV6:%t%11%n%tPhase1AuthSetId:%t%12%n%tPhase2AuthSetId:%t%13%n%tPhase2CryptoSetId:%t%14%n%tAction:%t%15%n%tProfiles:%t%16%n%tLocalAddresses:%t%17%n%tRemoteAddresses:%t%18%n%tEmbeddedContext:%t%20%n%tIsDTM:%t%22%n%tApplyAuthZ:%t%23%n%tBypassTunnelIfEncrypted:%t%24%n%tNoIPSecOnOutbound:%t%25%n%tModifyingUser:%t%26%n%tModifyingApplication:%t%27" />
        <string id="WFCSRuleDeletedEventMessage" value="A connection security rule was deleted from IPsec settings.%n%nDeleted Rule:%n%tRule ID:%t%1%n%tRule Name:%t%2%n%tModifying User:%t%3%n%tModifying Application:%t%4" />
        <string id="WFCSRuleNotAppliedEventMessage" value="Windows Firewall did not apply the following rule because the rule was not properly configured on this computer:%n%nRule Information:%n%tID:%t%1%n%tName:%t%2%n%nError Information:%n%tReason:%t%3" />
        <string id="WFCSStartupRuleAddEventMessage" value="A connection security rule was added to IPsec settings when Windows Firewall started.%n%n%tRule ID:%t%1%n%tRule Name:%t%2%n%tOrigin:%t%3%n%tActive:%t%4%n%tProtocol:%t%5%n%tEndPoint1Ports:%t%6%n%tEndPoint2Ports:%t%7%n%tLocalTunnelEndpointV4:%t%8%n%tLocalTunnelEndpointV6:%t%9%n%tRemoteTunnelEndpointV4:%t%10%n%tRemoteTunnelEndpointV6:%t%11%n%tPhase1AuthSetId:%t%12%n%tPhase2AuthSetId:%t%13%n%tPhase2CryptoSetId:%t%14%n%tAction:%t%15%n%tProfiles:%t%16%n%tLocalAddresses:%t%17%n%tRemoteAddresses:%t%18%n%tEmbeddedContext:%t%20%n%tIsDTM:%t%22%n%tApplyAuthZ:%t%23%n%tBypassTunnelIfEncrypted:%t%24%n%tNoIPSecOnOutbound:%t%25%n%tModifyingUser:%t%26%n%tModifyingApplication:%t%27" />
        <string id="WFDir_ValueMap.FW_DIR_IN" value="Inbound" />
        <string id="WFDir_ValueMap.FW_DIR_OUT" value="Outbound" />
        <string id="WFGlobalConfigurationChangedEventMessage" value="A Windows Firewall setting has changed.%n%nNew Setting:%n%tType:%t%1%n%tValue:%t%4%n%tModifying User:%t%6%n%tModifying Application:%t%7" />
        <string id="WFGlobalSettingChangedEventMessage" value="A Windows Firewall setting has changed.%n%t%nProfile That Was Changed:%t%1%n%nNew Setting:%n%tType:%t%2%n%tValue:%t%3" />
        <string id="WFGroupPolicyErrorEventMessage" value="The Windows Firewall service failed to load Group Policy.%nError:%t%1" />
        <string id="WFGroupPolicySuccessEventMessage" value="Windows Firewall Group Policy settings have changed. The new settings have been applied" />
        <string id="WFInterfaceProfileChangedEventMessage" value="Network profile changed on an interface.%n%nAdapter GUID:%t%1%nAdapter Name:%t%2%nOld Profile:%t%3%nNew Profile:%t%4" />
        <string id="WFIPSecExempt.ICMP" value="ICMP" />
        <string id="WFIPSecExempt.ND" value="NeighborDiscovery" />
        <string id="WFIPSecExempt.None" value="None" />
        <string id="WFIPsecPhase_ValueMap.FW_IPSEC_PHASE_1" value="Phase 1" />
        <string id="WFIPsecPhase_ValueMap.FW_IPSEC_PHASE_2" value="Phase 2" />
        <string id="WFIPsecPhase_ValueMap.FW_IPSEC_PHASE_INVALID" value="Invalid" />
        <string id="WFMMRuleAddEventMessage" value="A main mode rule has been added in the IPsec settings.%n%n%tRule ID:%t%1%n%tRule Name:%t%2%n%tProfiles:%t%3%n%tEndpoint1:%t%4%n%tEndpoint2:%t%5%n%tPhase1AuthSetId:%t%6%n%tPhase1CryptoSetId:%t%7%n%tFlags:%t%8%n%tActive:%t%9%n%tEmbeddedContext:%t%10%n%tOrigin:%t%11%n%tModifyingUser:%t%12%n%tModifyingApplication:%t%13" />
        <string id="WFMMRuleChangeEventMessage" value="A main mode rule has been modified in the IPsec settings.%n%n%tRule ID:%t%1%n%tRule Name:%t%2%n%tProfiles:%t%3%n%tEndpoint1:%t%4%n%tEndpoint2:%t%5%n%tPhase1AuthSetId:%t%6%n%tPhase1CryptoSetId:%t%7%n%tFlags:%t%8%n%tActive:%t%9%n%tEmbeddedContext:%t%10%n%tOrigin:%t%11%n%tModifyingUser:%t%12%n%tModifyingApplication:%t%13" />
        <string id="WFMMRuleDeletedEventMessage" value="A main mode rule has been deleted in the IPsec settings.%n%nDeleted Rule:%n%tRule ID:%t%1%n%tRule Name:%t%2%n%tModifying User:%t%3%n%tModifying Application:%t%4" />
        <string id="WFMMStartupRuleAddEventMessage" value="A main mode rule was added to the IPsec settings when Windows Firewall started.%n%n%tRule ID:%t%1%n%tRule Name:%t%2%n%tProfiles:%t%3%n%tEndpoint1:%t%4%n%tEndpoint2:%t%5%n%tPhase1AuthSetId:%t%6%n%tPhase1CryptoSetId:%t%7%n%tFlags:%t%8%n%tActive:%t%9%n%tEmbeddedContext:%t%10%n%tOrigin:%t%11%n%tModifyingUser:%t%12%n%tModifyingApplication:%t%13" />
        <string id="WFOrigin_ValueMap.FW_RULE_ORIGIN_AUTOGEN" value="AutoGenerated" />
        <string id="WFOrigin_ValueMap.FW_RULE_ORIGIN_DYNAMIC" value="Dynamic" />
        <string id="WFOrigin_ValueMap.FW_RULE_ORIGIN_GP" value="Group Policy" />
        <string id="WFOrigin_ValueMap.FW_RULE_ORIGIN_HARDCODED" value="Hardcoded" />
        <string id="WFOrigin_ValueMap.FW_RULE_ORIGIN_LOCAL" value="Local" />
        <string id="WFPhase1CryptoSetAddEventMessage" value="A phase 1 crypto set was added to IPsec settings.%n%n%tSet ID:%t%1%n%tSet Name:%t%2%n%tOrigin:%t%4%n%tFlags:%t%6%n%tNumSuites:%t%7%n%tTimeOutMinutes:%t%10%n%tTimeOutSessions:%t%11%n%tModifyingUser:%t%12%n%tModifyingApplication:%t%13" />
        <string id="WFPhase1CryptoSetChangeEventMessage" value="A phase 1 crypto set was modified in IPsec settings.%n%n%tSet ID:%t%1%n%tSet Name:%t%2%n%tOrigin:%t%4%n%tFlags:%t%6%n%tNumSuites:%t%7%n%tTimeOutMinutes:%t%10%n%tTimeOutSessions:%t%11%n%tModifyingUser:%t%12%n%tModifyingApplication:%t%13" />
        <string id="WFPhase1CryptoSetDeleteEventMessage" value="A phase 1 crypto set was deleted from IPsec settings.%n%nDeleted Rule:%n%tRule ID:%t%1%n%tRule Name:%t%2%n%tModifying User:%t%3%n%tModifying Application:%t%4" />
        <string id="WFPhase1CryptoSetFlag_ValueMap.FW_PHASE1_CRYPTO_FLAGS_DO_NOT_SKIP_DH" value="Do Not Skip DH" />
        <string id="WFPhase1CryptoSetFlag_ValueMap.FW_PHASE1_CRYPTO_FLAGS_NONE" value="None" />
        <string id="WFPhase1CryptoSetStartupAddEventMessage" value="A phase 1 crypto set was added to IPsec settings when Windows Firewall started.%n%n%tSet ID:%t%1%n%tSet Name:%t%2%n%tOrigin:%t%4%n%tFlags:%t%6%n%tNumSuites:%t%7%n%tTimeOutMinutes:%t%10%n%tTimeOutSessions:%t%11%n%tModifyingUser:%t%12%n%tModifyingApplication:%t%13" />
        <string id="WFPhase2CryptoSetAddEventMessage" value="A phase 2 crypto set was added to IPsec settings.%n%n%tSet ID:%t%1%n%tSet Name:%t%2%n%tOrigin:%t%4%n%tPfs:%t%6%n%tNumSuites:%t%7%n%tModifyingUser:%t%10%n%tModifyingApplication:%t%11" />
        <string id="WFPhase2CryptoSetChangeEventMessage" value="A phase 2 crypto set was modified in IPsec settings.%n%n%tSet ID:%t%1%n%tSet Name:%t%2%n%tOrigin:%t%4%n%tPfs:%t%6%n%tNumSuites:%t%7%n%tModifyingUser:%t%10%n%tModifyingApplication:%t%11" />
        <string id="WFPhase2CryptoSetDeleteEventMessage" value="A phase 2 crypto set was deleted from IPsec settings.%n%nDeleted Rule:%n%tRule ID:%t%1%n%tRule Name:%t%2%n%tModifying User:%t%3%n%tModifying Application:%t%4" />
        <string id="WFPhase2CryptoSetPfs_ValueMap.FW_PHASE2_CRYPTO_PFS_DH1" value="DHGroup1" />
        <string id="WFPhase2CryptoSetPfs_ValueMap.FW_PHASE2_CRYPTO_PFS_DH2" value="DHGroup1" />
        <string id="WFPhase2CryptoSetPfs_ValueMap.FW_PHASE2_CRYPTO_PFS_DH2048" value="DHGroup14" />
        <string id="WFPhase2CryptoSetPfs_ValueMap.FW_PHASE2_CRYPTO_PFS_DH24" value="DHGroup24" />
        <string id="WFPhase2CryptoSetPfs_ValueMap.FW_PHASE2_CRYPTO_PFS_DISABLE" value="None" />
        <string id="WFPhase2CryptoSetPfs_ValueMap.FW_PHASE2_CRYPTO_PFS_ECDH256" value="ECDHP256" />
        <string id="WFPhase2CryptoSetPfs_ValueMap.FW_PHASE2_CRYPTO_PFS_ECDH384" value="ECDHP384" />
        <string id="WFPhase2CryptoSetPfs_ValueMap.FW_PHASE2_CRYPTO_PFS_INVALID" value="Invalid" />
        <string id="WFPhase2CryptoSetPfs_ValueMap.FW_PHASE2_CRYPTO_PFS_PHASE1" value="MainMode" />
        <string id="WFPhase2CryptoSetStartupAddEventMessage" value="A phase 2 crypto set was added to IPsec settings when Windows Firewall started.%n%n%tSet ID:%t%1%n%tSet Name:%t%2%n%tOrigin:%t%4%n%tPfs:%t%6%n%tNumSuites:%t%7%n%tModifyingUser:%t%10%n%tModifyingApplication:%t%11" />
        <string id="WFProfileConfigurationChangedEventMessage" value="A Windows Firewall setting in the %1 profile has changed.%nNew Setting:%n%tType:%t%2%n%tValue:%t%5%n%tModifying User:%t%7%n%tModifying Application:%t%8" />
        <string id="WFProfileSettingChangedEventMessage" value="A Windows Firewall setting has changed.%n%t%nProfile That Was Changed:%t%1%n%nNew Setting:%n%tType:%t%2%n%tValue:%t%3" />
        <string id="WFProfileType_ValueMap.Domain" value="Domain" />
        <string id="WFProfileType_ValueMap.None" value="None" />
        <string id="WFProfileType_ValueMap.Private" value="Private" />
        <string id="WFProfileType_ValueMap.PrivateDomain" value="Private,Domain" />
        <string id="WFProfileType_ValueMap.Public" value="Public" />
        <string id="WFProfileType_ValueMap.PublicDomain" value="Public, Domain" />
        <string id="WFProfileType_ValueMap.PublicPrivate" value="Public, Private" />
        <string id="WFProfileType_ValueMap.PublicPrivateDomain" value="Private,Domain, Public" />
        <string id="WFPSK_ValueMap.None" value="None" />
        <string id="WFPSK_ValueMap.UTF8" value="UTF8" />
        <string id="WFRestoreDefaultsEventMessage" value="Windows Firewall has been reset to its default configuration.%n%n%tModifyingUser:%t%1%n%tModifyingApplication:%t%2" />
        <string id="WFRuleAddEventMessage" value="A rule has been added to the Windows Firewall exception list.%n%nAdded Rule:%n%tRule ID:%t%1%n%tRule Name:%t%2%n%tOrigin:%t%3%n%tActive:%t%18%n%tDirection:%t%6%n%tProfiles:%t%11%n%tAction:%t%10%n%tApplication Path:%t%4%n%tService Name:%t%5%n%tProtocol:%t%7%n%tSecurity Options:%t%21%n%tEdge Traversal:%t%19%n%tModifying User:%t%22%n%tModifying Application:%t%23" />
        <string id="WFRuleAddStartupEventMessage" value="A rule has been listed when the Windows Firewall started.%n%nAdded Rule:%n%tRule ID:%t%1%n%tRule Name:%t%2%n%tOrigin:%t%3%n%tActive:%t%18%n%tDirection:%t%6%n%tProfiles:%t%11%n%tAction:%t%10%n%tApplication Path:%t%4%n%tService Name:%t%5%n%tProtocol:%t%7%n%tSecurity Options:%t%21%n%tEdge Traversal:%t%19" />
        <string id="WFRuleChangeEventMessage" value="A rule has been modified in the Windows Firewall exception list.%n%nModified Rule:%n%tRule ID:%t%1%n%tRule Name:%t%2%n%tOrigin:%t%3%n%tActive:%t%18%n%tDirection:%t%6%n%tProfiles:%t%11%n%tAction:%t%10%n%tApplication Path:%t%4%n%tService Name:%t%5%n%tProtocol:%t%7%n%tSecurity Options:%t%21%n%tEdge Traversal:%t%19%n%tModifying User:%t%22%n%tModifying Application:%t%23" />
        <string id="WFRuleDeleteEventMessage" value="A rule has been deleted in the Windows Firewall exception list.%n%nDeleted Rule:%n%tRule ID:%t%1%n%tRule Name:%t%2%n%tModifying User:%t%3%n%tModifying Application:%t%4" />
        <string id="WFSettingType_ValueMap.FW_GLOBAL_CONFIG_BINARY_VERSION_SUPPORTED" value="Binary Version Supported" />
        <string id="WFSettingType_ValueMap.FW_GLOBAL_CONFIG_CRL_CHECK" value="IPsec CRL Check" />
        <string id="WFSettingType_ValueMap.FW_GLOBAL_CONFIG_CURRENT_PROFILE" value="Current Profile" />
        <string id="WFSettingType_ValueMap.FW_GLOBAL_CONFIG_DISABLE_STATEFUL_FTP" value="Disable Stateful FTP" />
        <string id="WFSettingType_ValueMap.FW_GLOBAL_CONFIG_DISABLE_STATEFUL_PPTP" value="Ignored Disable Stateful PPTP" />
        <string id="WFSettingType_ValueMap.FW_GLOBAL_CONFIG_IPSEC_EXEMPT" value="IPsec Exempt" />
        <string id="WFSettingType_ValueMap.FW_GLOBAL_CONFIG_IPSEC_THROUGH_NAT" value="IPsec Through NAT" />
        <string id="WFSettingType_ValueMap.FW_GLOBAL_CONFIG_IPSEC_TUNNEL_REMOTE_MACHINE_AUTHORIZATION_LIST" value="Remote Machine Authorization List" />
        <string id="WFSettingType_ValueMap.FW_GLOBAL_CONFIG_IPSEC_TUNNEL_REMOTE_USER_AUTHORIZATION_LIST" value="Remote User Authorization List" />
        <string id="WFSettingType_ValueMap.FW_GLOBAL_CONFIG_POLICY_VERSION" value="Policy Version" />
        <string id="WFSettingType_ValueMap.FW_GLOBAL_CONFIG_PRESHARED_KEY_ENCODING" value="IPsec preshared key encoding" />
        <string id="WFSettingType_ValueMap.FW_GLOBAL_CONFIG_SA_IDLE_TIME" value="IPsec SA Idle time" />
        <string id="WFSettingType_ValueMap.FW_PROFILE_CONFIG_ALLOW_LOCAL_IPSEC_POLICY_MERGE" value="Allow Local IPsec Policy Merge" />
        <string id="WFSettingType_ValueMap.FW_PROFILE_CONFIG_ALLOW_LOCAL_POLICY_MERGE" value="Allow Local Policy Merge" />
        <string id="WFSettingType_ValueMap.FW_PROFILE_CONFIG_AUTH_APPS_ALLOW_USER_PREF_MERGE" value="Allow User preferred merge of Authorized Applications" />
        <string id="WFSettingType_ValueMap.FW_PROFILE_CONFIG_DEFAULT_INBOUND_ACTION" value="Default Inbound Action" />
        <string id="WFSettingType_ValueMap.FW_PROFILE_CONFIG_DEFAULT_OUTBOUND_ACTION" value="Default Outbound Action" />
        <string id="WFSettingType_ValueMap.FW_PROFILE_CONFIG_DISABLE_INBOUND_NOTIFICATIONS" value="Disable Inbound Notifications" />
        <string id="WFSettingType_ValueMap.FW_PROFILE_CONFIG_DISABLE_STEALTH_MODE" value="Disable Stealth Mode" />
        <string id="WFSettingType_ValueMap.FW_PROFILE_CONFIG_DISABLE_STEALTH_MODE_IPSEC_SECURED_PACKET_EXEMPTION" value="Disable Stealth Mode IPsec Secured Packet Exemption" />
        <string id="WFSettingType_ValueMap.FW_PROFILE_CONFIG_DISABLE_UNICAST_RESPONSES_TO_MULTICAST_BROADCAST" value="Disable Unicast Responses to Multicast" />
        <string id="WFSettingType_ValueMap.FW_PROFILE_CONFIG_DISABLED_INTERFACES" value="Disabled Interfaces" />
        <string id="WFSettingType_ValueMap.FW_PROFILE_CONFIG_ENABLE_FW" value="Enable Windows Firewall" />
        <string id="WFSettingType_ValueMap.FW_PROFILE_CONFIG_GLOBAL_PORTS_ALLOW_USER_PREF_MERGE" value="Allow User preferred merge of Globally open ports" />
        <string id="WFSettingType_ValueMap.FW_PROFILE_CONFIG_LOG_DROPPED_PACKETS" value="Log Dropped Packets" />
        <string id="WFSettingType_ValueMap.FW_PROFILE_CONFIG_LOG_FILE_PATH" value="Log File Path" />
        <string id="WFSettingType_ValueMap.FW_PROFILE_CONFIG_LOG_IGNORED_RULES" value="Log Ignored Rules" />
        <string id="WFSettingType_ValueMap.FW_PROFILE_CONFIG_LOG_MAX_FILE_SIZE" value="Maximum Log File Size" />
        <string id="WFSettingType_ValueMap.FW_PROFILE_CONFIG_LOG_SUCCESS_CONNECTIONS" value="Log Successful Connections" />
        <string id="WFSettingType_ValueMap.FW_PROFILE_CONFIG_SHIELDED" value="Windows Firewall Shielded Mode" />
        <string id="WFStartupConfigurationInfoMessage" value="The following settings were applied to the Windows Firewall at startup%n%n%tCurrent Profile:%t%1%n%tIPsec SA Idle time:%t%2%n%tIPsec preshared key encoding:%t%3%n%tIPsec Exempt:%t%4%n%tIPsec CRL Check:%t%5%n%tIPsec Through NAT:%t%6%n%tPolicy Version Supported:%t%7%n%tPolicy Version:%t%8%n%tBinary Version Supported:%t%9%n%tStateful FTP:%t%10%n%tGroup Policy Applied:%t%11%n%tRemote Machine Authorization List:%t%12%n%tRemote UserAuthorization List:%t%13" />
        <string id="WFStartupProfileConfigurationInfoMessage" value="The following per profile settings were applied by Windows Firewall %n%n%tProfile:%t%1%n%tOperational Mode:%t%2%n%tStealth Mode:%t%3%n%tBlock all Incoming Connections:%t%4%n%tUnicast response to multicast broadcast:%t%5%n%tLog dropped packets:%t%6%n%tLog successful connections:%t%7%n%tLog ignored rules:%t%8%n%tInbound Notifications:%t%9%n%tAllow Local Policy Merge:%t%12%n%tAllow Local IPsec Policy Merge:%t%13%n%tDefault Outbound Action:%t%14%n%tDefault Inbound Action:%t%15%n%tRemote Administration:%t%16%n%tStealth Mode IPsec Secured Packet Exemption:%t%21%n%tMaximum Log file size:%t%17%n%tLog File path:%t%18%n%tAllow User preferred merge of Authorized Applications:%t%10%n%tAllow User preferred merge of Globally open ports:%t%11" />
        <string id="WFStoreType_ValueMap.FW_STORE_TYPE_DYNAMIC" value="Dynamic" />
        <string id="WFStoreType_ValueMap.FW_STORE_TYPE_GP_RSOP" value="Group policy RSOP" />
        <string id="WFStoreType_ValueMap.FW_STORE_TYPE_GPO" value="Group policy" />
        <string id="WFStoreType_ValueMap.FW_STORE_TYPE_LOCAL" value="Local" />
        <string id="WFStoreType_ValueMap.FW_STORE_TYPE_WSH_CONFIGURABLE" value="WSH Configurable" />
        <string id="WFStoreType_ValueMap.FW_STORE_TYPE_WSH_STATIC" value="WSH Static" />
        <string id="WFUnableToShowQueryUserNotificationEventMessage" value="Windows Firewall was unable to notify the user that it blocked an application from accepting incoming connections on the network.%n%nReason:%t%t%1%nApplication Path:%t%2%nIP Version:%t%3%nProtocol:%t%4%nPort:%t%t%5%nProcess Id:%t%6%nUser:%t%t%7" />
        <string id="YesNo_ValueMap.No" value="No" />
        <string id="YesNo_ValueMap.Yes" value="Yes" />
      </stringTable>
    </resources>
  </localization>
  <instrumentation>
    <events xmlns="http://schemas.microsoft.com/win/2004/08/events">
      <provider guid="{5444519f-2484-45a2-991e-953e4b54c8e0}" message="$(string.MpsSrvProviderName)" messageFileName="%SystemRoot%\system32\mpssvc.dll" name="Microsoft-Windows-MPS-SRV" parameterFileName="%SystemRoot%\system32\mpssvc.dll" resourceFileName="%SystemRoot%\system32\mpssvc.dll" symbol="MS_MPS_SRV_Provider">
        <channels>
          <channel chid="defch" name="Microsoft-Windows-MPS-SRV/Diagnostic" type="Analytic" />
        </channels>
        <keywords>
          <keyword mask="0x10000" name="Service" />
        </keywords>
        <tasks>
          <task name="StartService" value="101" />
          <task name="StopService" value="103" />
          <task name="Audit_Initialize" value="105" />
          <task name="Audit_Shutdown" value="107" />
          <task name="AuthApps_Initialize" value="113" />
          <task name="AuthApps_Shutdown" value="115" />
          <task name="Notify_Initialize" value="117" />
          <task name="Notify_Shutdown" value="119" />
          <task name="DynPorts_Initialize" value="121" />
          <task name="DynPorts_Shutdown" value="123" />
          <task name="ChangeSource_Initialize" value="125" />
          <task name="ChangeSource_Shutdown" value="127" />
          <task name="Writer_Initialize" value="129" />
          <task name="Writer_Shutdown" value="131" />
          <task name="Logger_Initialize" value="133" />
          <task name="Logger_Shutdown" value="135" />
          <task name="DynDataNLA1stPhase_Initialize" value="137" />
          <task name="DynDataNLA1stPhase_Shutdown" value="139" />
          <task name="ProfileMgr_Initialize" value="141" />
          <task name="ProfileMgr_Shutdown" value="143" />
          <task name="Upcall2ndPhase_Initialize" value="145" />
          <task name="Upcall2ndPhase_Shutdown" value="147" />
          <task name="RpcAPIs_Initialize" value="149" />
          <task name="RpcAPIs_Shutdown" value="151" />
          <task name="ResrcIndicationAPIs_Initialize" value="153" />
          <task name="ResrcIndicationAPIs_Shutdown" value="10" />
          <task name="GPMon_Initialize" value="155" />
          <task name="GPMon_Shutdown" value="157" />
          <task name="DynDataNLA2ndPhase_Initialize" value="159" />
          <task name="DynDataNLA2ndPhase_Shutdown" value="161" />
          <task name="ServiceSignalReady" value="163" />
          <task name="Empty_Shutdown" value="165" />
          <task name="Products_Initialize" value="167" />
          <task name="Products_Shutdown" value="169" />
          <task name="HttpProxy_Initialize" value="171" />
          <task name="HttpProxy_Shutdown" value="173" />
          <task name="AdhSitesSubnets_Initialize" value="175" />
          <task name="AdhSitesSubnets_Shutdown" value="177" />
          <task name="Moneis_Initialize" value="179" />
          <task name="Moneis_Shutdown" value="181" />
          <task name="MoneisRegistrationApiPhase2_Initialize" value="183" />
          <task name="MoneisRegistrationApiPhase2_Shutdown" value="185" />
          <task name="MPS_SVC_API_RestoreDefaults" value="201" />
          <task name="MPS_SVC_API_EnumFirewallRules" value="203" />
          <task name="MPS_SVC_API_DeleteFirewallRule" value="205" />
          <task name="MPS_SVC_API_DeleteAllFirewallRules" value="207" />
          <task name="MPS_SVC_API_AddFirewallRule" value="209" />
          <task name="MPS_SVC_API_SetFirewallRule" value="211" />
          <task name="MPS_SVC_API_GetConfig" value="213" />
          <task name="MPS_SVC_API_SetConfig" value="215" />
          <task name="MPS_SVC_API_GetGlobalConfig" value="217" />
          <task name="MPS_SVC_API_SetGlobalConfig" value="219" />
          <task name="MPS_SVC_API_OpenPolicyStore" value="221" />
          <task name="MPS_SVC_API_ClosePolicyStore" value="223" />
          <task name="MPS_SVC_API_AddConnectionSecurityRule" value="225" />
          <task name="MPS_SVC_API_SetConnectionSecurityRule" value="227" />
          <task name="MPS_SVC_API_DeleteConnectionSecurityRule" value="2" />
          <task name="MPS_SVC_API_DeleteAllConnectionSecurityRules" value="229" />
          <task name="MPS_SVC_API_EnumConnectionSecurityRules" value="231" />
          <task name="MPS_SVC_API_AddAuthenticationSet" value="233" />
          <task name="MPS_SVC_API_DeleteAuthenticationSet" value="235" />
          <task name="MPS_SVC_API_SetAuthenticationSet" value="237" />
          <task name="MPS_SVC_API_DeleteAllAuthenticationSets" value="239" />
          <task name="MPS_SVC_API_EnumAuthenticationSets" value="241" />
          <task name="MPS_SVC_API_AddCryptoSet" value="243" />
          <task name="MPS_SVC_API_SetCryptoSet" value="245" />
          <task name="MPS_SVC_API_DeleteCryptoSet" value="247" />
          <task name="MPS_SVC_API_DeleteAllCryptoSets" value="249" />
          <task name="MPS_SVC_API_EnumCryptoSets" value="251" />
          <task name="MPS_SVC_API_EnumPhase1SAs" value="253" />
          <task name="MPS_SVC_API_DeletePhase1SAs" value="255" />
          <task name="MPS_SVC_API_EnumPhase2SAs" value="257" />
          <task name="MPS_SVC_API_DeletePhase2SAs" value="259" />
          <task name="MPS_SVC_API_NotifyUnsupportedAttempt" value="261" />
          <task name="MPS_SVC_API_RegisterProduct" value="263" />
          <task name="MPS_SVC_API_UnregisterProduct" value="265" />
          <task name="MPS_SVC_API_EnumProducts" value="267" />
          <task name="MPS_SVC_API_AddMainModeRule" value="269" />
          <task name="MPS_SVC_API_SetMainModeRule" value="271" />
          <task name="MPS_SVC_API_DeleteMainModeRule" value="273" />
          <task name="MPS_SVC_API_DeleteAllMainModeRules" value="275" />
          <task name="MPS_SVC_API_EnumMainModeRules" value="277" />
          <task name="MPS_SVC_API_QueryFirewallRules" value="279" />
          <task name="MPS_SVC_API_QueryConnectionSecurityRules" value="281" />
          <task name="MPS_SVC_API_QueryMainModeRules" value="283" />
          <task name="MPS_SVC_API_QueryAuthenticationSets" value="285" />
          <task name="MPS_SVC_API_QueryCryptoSets" value="287" />
          <task name="MPS_SVC_BFE_EngineOpen" value="301" />
          <task name="MPS_SVC_BFE_EngineClose" value="303" />
          <task name="MPS_SVC_BFE_TransactionBegin" value="305" />
          <task name="MPS_SVC_BFE_TransactionAbort" value="307" />
          <task name="MPS_SVC_BFE_TransactionCommit" value="309" />
          <task name="MPS_SVC_BFE_ProviderAdd" value="311" />
          <task name="MPS_SVC_BFE_SublayerAdd" value="313" />
          <task name="MPS_SVC_BFE_FilterAdd" value="315" />
          <task name="MPS_SVC_BFE_FilterDeleteByKey" value="317" />
          <task name="MPS_SVC_BFE_FilterDeleteById" value="319" />
          <task name="GPPolicyUpdate" value="400" />
          <task name="PlumberPolicyBegin" value="501" />
          <task name="PlumberPolicyCommit" value="502" />
          <task name="PlumberPolicyAbort" value="503" />
        </tasks>
        <events>
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_Start_Begin" task="StartService" value="101" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_Start_End" task="StartService" value="102" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_Stop_Begin" task="StopService" value="103" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_Stop_End" task="StopService" value="104" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_Audit_Initialize_Begin" task="Audit_Initialize" value="105" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_Audit_Initialize_End" task="Audit_Initialize" value="106" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_Audit_Shutdown_Begin" task="Audit_Shutdown" value="107" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_Audit_Shutdown_End" task="Audit_Shutdown" value="108" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_AuthApps_Initialize_Begin" task="AuthApps_Initialize" value="113" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_AuthApps_Initialize_End" task="AuthApps_Initialize" value="114" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_AuthApps_Shutdown_Begin" task="AuthApps_Shutdown" value="115" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_AuthApps_Shutdown_End" task="AuthApps_Shutdown" value="116" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_Notify_Initialize_Begin" task="Notify_Initialize" value="117" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_Notify_Initialize_End" task="Notify_Initialize" value="118" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_Notify_Shutdown_Begin" task="Notify_Shutdown" value="119" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_Notify_Shutdown_End" task="Notify_Shutdown" value="120" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_DynPorts_Initialize_Begin" task="DynPorts_Initialize" value="121" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_DynPorts_Initialize_End" task="DynPorts_Initialize" value="122" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_DynPorts_Shutdown_Begin" task="DynPorts_Shutdown" value="123" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_DynPorts_Shutdown_End" task="DynPorts_Shutdown" value="124" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_ChangeSource_Initialize_Begin" task="ChangeSource_Initialize" value="125" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_ChangeSource_Initialize_End" task="ChangeSource_Initialize" value="126" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_ChangeSource_Shutdown_Begin" task="ChangeSource_Shutdown" value="127" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_ChangeSource_Shutdown_End" task="ChangeSource_Shutdown" value="128" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_Writer_Initialize_Begin" task="Writer_Initialize" value="129" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_Writer_Initialize_End" task="Writer_Initialize" value="130" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_Writer_Shutdown_Begin" task="Writer_Shutdown" value="131" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_Writer_Shutdown_End" task="Writer_Shutdown" value="132" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_Logger_Initialize_Begin" task="Logger_Initialize" value="133" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_Logger_Initialize_End" task="Logger_Initialize" value="134" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_Logger_Shutdown_Begin" task="Logger_Shutdown" value="135" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_Logger_Shutdown_End" task="Logger_Shutdown" value="136" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_DynDataNLA1stPhase_Initialize_Begin" task="DynDataNLA1stPhase_Initialize" value="137" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_DynDataNLA1stPhase_Initialize_End" task="DynDataNLA1stPhase_Initialize" value="138" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_DynDataNLA1stPhase_Shutdown_Begin" task="DynDataNLA1stPhase_Shutdown" value="139" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_DynDataNLA1stPhase_Shutdown_End" task="DynDataNLA1stPhase_Shutdown" value="140" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_ProfileMgr_Initialize_Begin" task="ProfileMgr_Initialize" value="141" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_ProfileMgr_Initialize_End" task="ProfileMgr_Initialize" value="142" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_ProfileMgr_Shutdown_Begin" task="ProfileMgr_Shutdown" value="143" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_ProfileMgr_Shutdown_End" task="ProfileMgr_Shutdown" value="144" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_Upcall2ndPhase_Initialize_Begin" task="Upcall2ndPhase_Initialize" value="145" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_Upcall2ndPhase_Initialize_End" task="Upcall2ndPhase_Initialize" value="146" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_Upcall2ndPhase_Shutdown_Begin" task="Upcall2ndPhase_Shutdown" value="147" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_Upcall2ndPhase_Shutdown_End" task="Upcall2ndPhase_Shutdown" value="148" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_RpcAPIs_Initialize_Begin" task="RpcAPIs_Initialize" value="149" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_RpcAPIs_Initialize_End" task="RpcAPIs_Initialize" value="150" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_RpcAPIs_Shutdown_Begin" task="RpcAPIs_Shutdown" value="151" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_RpcAPIs_Shutdown_End" task="RpcAPIs_Shutdown" value="152" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_ResrcIndicationAPIs_Initialize_Begin" task="ResrcIndicationAPIs_Initialize" value="153" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_ResrcIndicationAPIs_Initialize_End" task="ResrcIndicationAPIs_Initialize" value="154" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_ResrcIndicationAPIs_Shutdown_Begin" task="ResrcIndicationAPIs_Shutdown" value="155" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_ResrcIndicationAPIs_Shutdown_End" task="ResrcIndicationAPIs_Shutdown" value="156" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_GPMon_Initialize_Begin" task="GPMon_Initialize" value="157" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_GPMon_Initialize_End" task="GPMon_Initialize" value="158" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_GPMon_Shutdown_Begin" task="GPMon_Shutdown" value="159" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_GPMon_Shutdown_End" task="GPMon_Shutdown" value="160" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_DynDataNLA2ndPhase_Initialize_Begin" task="DynDataNLA2ndPhase_Initialize" value="161" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_DynDataNLA2ndPhase_Initialize_End" task="DynDataNLA2ndPhase_Initialize" value="162" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_DynDataNLA2ndPhase_Shutdown_Begin" task="DynDataNLA2ndPhase_Shutdown" value="163" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_DynDataNLA2ndPhase_Shutdown_End" task="DynDataNLA2ndPhase_Shutdown" value="164" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_ServiceSignalReady_Begin" task="ServiceSignalReady" value="165" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_ServiceSignalReady_End" task="ServiceSignalReady" value="166" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_Empty_Shutdown_Begin" task="Empty_Shutdown" value="167" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_Empty_Shutdown_End" task="Empty_Shutdown" value="168" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_Products_Initialize_Begin" task="Products_Initialize" value="169" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_Products_Initialize_End" task="Products_Initialize" value="170" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_Products_Shutdown_Begin" task="Products_Shutdown" value="171" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_Products_Shutdown_End" task="Products_Shutdown" value="172" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_HttpProxy_Initialize_Begin" task="HttpProxy_Initialize" value="173" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_HttpProxy_Initialize_End" task="HttpProxy_Initialize" value="174" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_HttpProxy_Shutdown_Begin" task="HttpProxy_Shutdown" value="175" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_HttpProxy_Shutdown_End" task="HttpProxy_Shutdown" value="176" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_AdhSitesSubnets_Initialize_Begin" task="AdhSitesSubnets_Initialize" value="177" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_AdhSitesSubnets_Initialize_End" task="AdhSitesSubnets_Initialize" value="178" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_AdhSitesSubnets_Shutdown_Begin" task="AdhSitesSubnets_Shutdown" value="179" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_AdhSitesSubnets_Shutdown_End" task="AdhSitesSubnets_Shutdown" value="180" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_Moneis_Initialize_Begin" task="Moneis_Initialize" value="181" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_Moneis_Initialize_End" task="Moneis_Initialize" value="182" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_Moneis_Shutdown_Begin" task="Moneis_Shutdown" value="183" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_Moneis_Shutdown_End" task="Moneis_Shutdown" value="184" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_MoneisRegistrationApiPhase2_Initialize_Begin" task="MoneisRegistrationApiPhase2_Initialize" value="185" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_MoneisRegistrationApiPhase2_Initialize_End" task="MoneisRegistrationApiPhase2_Initialize" value="186" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_MoneisRegistrationApiPhase2_Shutdown_Begin" task="MoneisRegistrationApiPhase2_Shutdown" value="187" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_MoneisRegistrationApiPhase2_Shutdown_End" task="MoneisRegistrationApiPhase2_Shutdown" value="188" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_RestoreDefaults" task="MPS_SVC_API_RestoreDefaults" value="200" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_RestoreDefaults" task="MPS_SVC_API_RestoreDefaults" value="201" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_EnumFirewallRules" task="MPS_SVC_API_EnumFirewallRules" value="202" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_EnumFirewallRules" task="MPS_SVC_API_EnumFirewallRules" value="203" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_DeleteFirewallRule" task="MPS_SVC_API_DeleteFirewallRule" value="204" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_DeleteFirewallRule" task="MPS_SVC_API_DeleteFirewallRule" value="205" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_DeleteAllFirewallRules" task="MPS_SVC_API_DeleteAllFirewallRules" value="206" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_DeleteAllFirewallRules" task="MPS_SVC_API_DeleteAllFirewallRules" value="207" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_AddFirewallRule" task="MPS_SVC_API_AddFirewallRule" value="208" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_AddFirewallRule" task="MPS_SVC_API_AddFirewallRule" value="209" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_SetFirewallRule" task="MPS_SVC_API_SetFirewallRule" value="210" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_SetFirewallRule" task="MPS_SVC_API_SetFirewallRule" value="211" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_GetConfig" task="MPS_SVC_API_GetConfig" value="212" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_GetConfig" task="MPS_SVC_API_GetConfig" value="213" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_SetConfig" task="MPS_SVC_API_SetConfig" value="214" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_SetConfig" task="MPS_SVC_API_SetConfig" value="215" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_GetGlobalConfig" task="MPS_SVC_API_GetGlobalConfig" value="216" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_GetGlobalConfig" task="MPS_SVC_API_GetGlobalConfig" value="217" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_SetGlobalConfig" task="MPS_SVC_API_SetGlobalConfig" value="218" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_SetGlobalConfig" task="MPS_SVC_API_SetGlobalConfig" value="219" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_OpenPolicyStore" task="MPS_SVC_API_OpenPolicyStore" value="220" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_OpenPolicyStore" task="MPS_SVC_API_OpenPolicyStore" value="221" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_ClosePolicyStore" task="MPS_SVC_API_ClosePolicyStore" value="222" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_ClosePolicyStore" task="MPS_SVC_API_ClosePolicyStore" value="223" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_AddConnectionSecurityRule" task="MPS_SVC_API_AddConnectionSecurityRule" value="224" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_AddConnectionSecurityRule" task="MPS_SVC_API_AddConnectionSecurityRule" value="225" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_SetConnectionSecurityRule" task="MPS_SVC_API_SetConnectionSecurityRule" value="226" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_SetConnectionSecurityRule" task="MPS_SVC_API_SetConnectionSecurityRule" value="227" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_DeleteConnectionSecurityRule" task="MPS_SVC_API_DeleteConnectionSecurityRule" value="228" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_DeleteConnectionSecurityRule" task="MPS_SVC_API_DeleteConnectionSecurityRule" value="229" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_DeleteAllConnectionSecurityRules" task="MPS_SVC_API_DeleteAllConnectionSecurityRules" value="230" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_DeleteAllConnectionSecurityRules" task="MPS_SVC_API_DeleteAllConnectionSecurityRules" value="231" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_EnumConnectionSecurityRules" task="MPS_SVC_API_EnumConnectionSecurityRules" value="232" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_EnumConnectionSecurityRules" task="MPS_SVC_API_EnumConnectionSecurityRules" value="233" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_AddAuthenticationSet" task="MPS_SVC_API_AddAuthenticationSet" value="234" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_AddAuthenticationSet" task="MPS_SVC_API_AddAuthenticationSet" value="235" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_DeleteAuthenticationSet" task="MPS_SVC_API_DeleteAuthenticationSet" value="236" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_DeleteAuthenticationSet" task="MPS_SVC_API_DeleteAuthenticationSet" value="237" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_SetAuthenticationSet" task="MPS_SVC_API_SetAuthenticationSet" value="238" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_SetAuthenticationSet" task="MPS_SVC_API_SetAuthenticationSet" value="239" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_DeleteAllAuthenticationSets" task="MPS_SVC_API_DeleteAllAuthenticationSets" value="240" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_DeleteAllAuthenticationSets" task="MPS_SVC_API_DeleteAllAuthenticationSets" value="241" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_EnumAuthenticationSets" task="MPS_SVC_API_EnumAuthenticationSets" value="242" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_EnumAuthenticationSets" task="MPS_SVC_API_EnumAuthenticationSets" value="243" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_AddCryptoSet" task="MPS_SVC_API_AddCryptoSet" value="244" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_AddCryptoSet" task="MPS_SVC_API_AddCryptoSet" value="245" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_SetCryptoSet" task="MPS_SVC_API_SetCryptoSet" value="246" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_SetCryptoSet" task="MPS_SVC_API_SetCryptoSet" value="247" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_DeleteCryptoSet" task="MPS_SVC_API_DeleteCryptoSet" value="248" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_DeleteCryptoSet" task="MPS_SVC_API_DeleteCryptoSet" value="249" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_DeleteAllCryptoSets" task="MPS_SVC_API_DeleteAllCryptoSets" value="250" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_DeleteAllCryptoSets" task="MPS_SVC_API_DeleteAllCryptoSets" value="251" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_EnumCryptoSets" task="MPS_SVC_API_EnumCryptoSets" value="252" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_EnumCryptoSets" task="MPS_SVC_API_EnumCryptoSets" value="253" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_EnumPhase1SAs" task="MPS_SVC_API_EnumPhase1SAs" value="254" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_EnumPhase1SAs" task="MPS_SVC_API_EnumPhase1SAs" value="255" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_DeletePhase1SAs" task="MPS_SVC_API_DeletePhase1SAs" value="256" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_DeletePhase1SAs" task="MPS_SVC_API_DeletePhase1SAs" value="257" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_EnumPhase2SAs" task="MPS_SVC_API_EnumPhase2SAs" value="258" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_EnumPhase2SAs" task="MPS_SVC_API_EnumPhase2SAs" value="259" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_DeletePhase2SAs" task="MPS_SVC_API_DeletePhase2SAs" value="260" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_DeletePhase2SAs" task="MPS_SVC_API_DeletePhase2SAs" value="261" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_NotifyUnsupportedAttempt" task="MPS_SVC_API_NotifyUnsupportedAttempt" value="262" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_NotifyUnsupportedAttempt" task="MPS_SVC_API_NotifyUnsupportedAttempt" value="263" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_RegisterProduct" task="MPS_SVC_API_RegisterProduct" value="264" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_RegisterProduct" task="MPS_SVC_API_RegisterProduct" value="265" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_UnregisterProduct" task="MPS_SVC_API_UnregisterProduct" value="266" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_UnregisterProduct" task="MPS_SVC_API_UnregisterProduct" value="267" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_EnumProducts" task="MPS_SVC_API_EnumProducts" value="268" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_EnumProducts" task="MPS_SVC_API_EnumProducts" value="269" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_AddMainModeRule" task="MPS_SVC_API_AddMainModeRule" value="270" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_AddMainModeRule" task="MPS_SVC_API_AddMainModeRule" value="271" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_SetMainModeRule" task="MPS_SVC_API_SetMainModeRule" value="272" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_SetMainModeRule" task="MPS_SVC_API_SetMainModeRule" value="273" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_DeleteMainModeRule" task="MPS_SVC_API_DeleteMainModeRule" value="274" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_DeleteMainModeRule" task="MPS_SVC_API_DeleteMainModeRule" value="275" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_DeleteAllMainModeRules" task="MPS_SVC_API_DeleteAllMainModeRules" value="276" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_DeleteAllMainModeRules" task="MPS_SVC_API_DeleteAllMainModeRules" value="277" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_EnumMainModeRules" task="MPS_SVC_API_EnumMainModeRules" value="278" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_EnumMainModeRules" task="MPS_SVC_API_EnumMainModeRules" value="279" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_QueryFirewallRules" task="MPS_SVC_API_QueryFirewallRules" value="280" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_QueryFirewallRules" task="MPS_SVC_API_QueryFirewallRules" value="281" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_QueryConnectionSecurityRules" task="MPS_SVC_API_QueryConnectionSecurityRules" value="282" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_QueryConnectionSecurityRules" task="MPS_SVC_API_QueryConnectionSecurityRules" value="283" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_QueryMainModeRules" task="MPS_SVC_API_QueryMainModeRules" value="284" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_QueryMainModeRules" task="MPS_SVC_API_QueryMainModeRules" value="285" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_QueryAuthenticationSets" task="MPS_SVC_API_QueryAuthenticationSets" value="286" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_QueryAuthenticationSets" task="MPS_SVC_API_QueryAuthenticationSets" value="287" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_API_Enter_QueryCryptoSets" task="MPS_SVC_API_QueryCryptoSets" value="288" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_API_Exit_QueryCryptoSets" task="MPS_SVC_API_QueryCryptoSets" value="289" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_BFE_EngineOpen_Enter" task="MPS_SVC_BFE_EngineOpen" value="301" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_BFE_EngineOpen_Exit" task="MPS_SVC_BFE_EngineOpen" value="302" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_BFE_EngineClose_Enter" task="MPS_SVC_BFE_EngineClose" value="303" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_BFE_EngineClose_Exit" task="MPS_SVC_BFE_EngineClose" value="304" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_BFE_TransactionBegin_Enter" task="MPS_SVC_BFE_TransactionBegin" value="305" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_BFE_TransactionBegin_Exit" task="MPS_SVC_BFE_TransactionBegin" value="306" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_BFE_TransactionAbort_Enter" task="MPS_SVC_BFE_TransactionAbort" value="307" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_BFE_TransactionAbort_Exit" task="MPS_SVC_BFE_TransactionAbort" value="308" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_BFE_TransactionCommit_Enter" task="MPS_SVC_BFE_TransactionCommit" value="309" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_BFE_TransactionCommit_Exit" task="MPS_SVC_BFE_TransactionCommit" value="310" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_BFE_ProviderAdd_Enter" task="MPS_SVC_BFE_ProviderAdd" value="311" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_BFE_ProviderAdd_Exit" task="MPS_SVC_BFE_ProviderAdd" value="312" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_BFE_SublayerAdd_Enter" task="MPS_SVC_BFE_SublayerAdd" value="313" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_BFE_SublayerAdd_Exit" task="MPS_SVC_BFE_SublayerAdd" value="314" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_BFE_FilterAdd_Enter" task="MPS_SVC_BFE_FilterAdd" value="315" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_BFE_FilterAdd_Exit" task="MPS_SVC_BFE_FilterAdd" value="316" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_BFE_FilterDeleteByKey_Enter" task="MPS_SVC_BFE_FilterDeleteByKey" value="317" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_BFE_FilterDeleteByKey_Exit" task="MPS_SVC_BFE_FilterDeleteByKey" value="318" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_BFE_FilterDeleteById_Enter" task="MPS_SVC_BFE_FilterDeleteById" value="319" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_BFE_FilterDeleteById_Exit" task="MPS_SVC_BFE_FilterDeleteById" value="320" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_GP_Policy_Begin" task="GPPolicyUpdate" value="400" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_GP_Policy_End" task="GPPolicyUpdate" value="401" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Start" symbol="MPS_SVC_Plumber_Policy_Begin" task="PlumberPolicyBegin" value="501" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_Plumber_Policy_Commit" task="PlumberPolicyCommit" value="502" />
          <event channel="defch" keywords="Service" level="win:Informational" opcode="win:Stop" symbol="MPS_SVC_Plumber_Policy_Abort" task="PlumberPolicyAbort" value="503" />
        </events>
      </provider>
      <provider guid="{37945dc2-899b-44d1-b79c-dd4a9e57ff98}" message="$(string.MpsClntProviderName)" messageFileName="%SystemRoot%\system32\mpssvc.dll" name="Microsoft-Windows-MPS-CLNT" parameterFileName="%SystemRoot%\system32\mpssvc.dll" resourceFileName="%SystemRoot%\system32\mpssvc.dll" symbol="MS_MPS_CLNT_Provider">
        <channels>
          <channel chid="defch" name="Microsoft-Windows-MPS-CLNT/Diagnostic" type="Analytic" />
        </channels>
        <keywords>
          <keyword mask="0x10000" name="Client" />
        </keywords>
        <tasks>
          <task name="MPS_CLNT_API_RestoreDefaults" value="101" />
          <task name="MPS_CLNT_API_EnumFirewallRules" value="103" />
          <task name="MPS_CLNT_API_DeleteFirewallRule" value="105" />
          <task name="MPS_CLNT_API_DeleteAllFirewallRules" value="107" />
          <task name="MPS_CLNT_API_AddFirewallRule" value="109" />
          <task name="MPS_CLNT_API_SetFirewallRule" value="111" />
          <task name="MPS_CLNT_API_GetConfig" value="113" />
          <task name="MPS_CLNT_API_SetConfig" value="115" />
          <task name="MPS_CLNT_API_GetGlobalConfig" value="117" />
          <task name="MPS_CLNT_API_SetGlobalConfig" value="119" />
          <task name="MPS_CLNT_API_OpenPolicyStore" value="121" />
          <task name="MPS_CLNT_API_ClosePolicyStore" value="123" />
          <task name="MPS_CLNT_API_AddConnectionSecurityRule" value="125" />
          <task name="MPS_CLNT_API_SetConnectionSecurityRule" value="127" />
          <task name="MPS_CLNT_API_DeleteConnectionSecurityRule" value="129" />
          <task name="MPS_CLNT_API_DeleteAllConnectionSecurityRules" value="131" />
          <task name="MPS_CLNT_API_EnumConnectionSecurityRules" value="133" />
          <task name="MPS_CLNT_API_AddAuthenticationSet" value="135" />
          <task name="MPS_CLNT_API_DeleteAuthenticationSet" value="137" />
          <task name="MPS_CLNT_API_SetAuthenticationSet" value="139" />
          <task name="MPS_CLNT_API_DeleteAllAuthenticationSets" value="141" />
          <task name="MPS_CLNT_API_EnumAuthenticationSets" value="143" />
          <task name="MPS_CLNT_API_AddCryptoSet" value="145" />
          <task name="MPS_CLNT_API_SetCryptoSet" value="147" />
          <task name="MPS_CLNT_API_DeleteCryptoSet" value="149" />
          <task name="MPS_CLNT_API_DeleteAllCryptoSets" value="151" />
          <task name="MPS_CLNT_API_EnumCryptoSets" value="153" />
          <task name="MPS_CLNT_API_EnumPhase1SAs" value="155" />
          <task name="MPS_CLNT_API_DeletePhase1SAs" value="157" />
          <task name="MPS_CLNT_API_EnumPhase2SAs" value="159" />
          <task name="MPS_CLNT_API_VerifyFirewallRule" value="161" />
          <task name="MPS_CLNT_API_VerifyConnectionSecurityRule" value="163" />
          <task name="MPS_CLNT_API_VerifyAuthenticationSet" value="165" />
          <task name="MPS_CLNT_API_VerifyCryptoSet" value="167" />
          <task name="MPS_CLNT_API_ImportPolicy" value="169" />
          <task name="MPS_CLNT_API_ExportPolicy" value="171" />
          <task name="MPS_CLNT_API_DeletePhase2SAs" value="173" />
          <task name="MPS_CLNT_API_FreeFirewallRules" value="175" />
          <task name="MPS_CLNT_API_FreeConnectionSecurityRules" value="177" />
          <task name="MPS_CLNT_API_FreeAuthenticationSets" value="179" />
          <task name="MPS_CLNT_API_FreeCryptoSets" value="181" />
          <task name="MPS_CLNT_API_FreePhase1SAs" value="183" />
          <task name="MPS_CLNT_API_FreePhase2SAs" value="185" />
          <task name="MPS_CLNT_API_StatusMessageFromStatusCode" value="187" />
          <task name="MPS_CLNT_API_AddMainModeRule" value="189" />
          <task name="MPS_CLNT_API_SetMainModeRule" value="191" />
          <task name="MPS_CLNT_API_DeleteMainModeRule" value="193" />
          <task name="MPS_CLNT_API_DeleteAllMainModeRules" value="195" />
          <task name="MPS_CLNT_API_EnumMainModeRules" value="197" />
          <task name="MPS_CLNT_API_FreeMainModeRules" value="199" />
          <task name="MPS_CLNT_API_VerifyMainModeRule" value="201" />
          <task name="MPS_CLNT_API_QueryFirewallRules" value="203" />
          <task name="MPS_CLNT_API_QueryConnectionSecurityRules" value="205" />
          <task name="MPS_CLNT_API_QueryMainModeRules" value="207" />
          <task name="MPS_CLNT_API_QueryAuthenticationSets" value="209" />
          <task name="MPS_CLNT_API_QueryCryptoSets" value="211" />
          <task name="MPS_CLNT_API_FreeQuery" value="213" />
          <task name="MPS_CLNT_API_VerifyFirewallRuleQuery" value="215" />
          <task name="MPS_CLNT_API_VerifyConnectionSecurityRuleQuery" value="217" />
          <task name="MPS_CLNT_API_VerifyMainModeRuleQuery" value="219" />
          <task name="MPS_CLNT_API_VerifyAuthenticationSetQuery" value="221" />
          <task name="MPS_CLNT_API_VerifyCryptoSetQuery" value="223" />
        </tasks>
        <events>
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_RestoreDefaults" task="MPS_CLNT_API_RestoreDefaults" value="200" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_RestoreDefaults" task="MPS_CLNT_API_RestoreDefaults" value="201" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_EnumFirewallRules" task="MPS_CLNT_API_EnumFirewallRules" value="202" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_EnumFirewallRules" task="MPS_CLNT_API_EnumFirewallRules" value="203" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_DeleteFirewallRule" task="MPS_CLNT_API_DeleteFirewallRule" value="204" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_DeleteFirewallRule" task="MPS_CLNT_API_DeleteFirewallRule" value="205" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_DeleteAllFirewallRules" task="MPS_CLNT_API_DeleteAllFirewallRules" value="206" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_DeleteAllFirewallRules" task="MPS_CLNT_API_DeleteAllFirewallRules" value="207" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_AddFirewallRule" task="MPS_CLNT_API_AddFirewallRule" value="208" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_AddFirewallRule" task="MPS_CLNT_API_AddFirewallRule" value="209" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_SetFirewallRule" task="MPS_CLNT_API_SetFirewallRule" value="210" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_SetFirewallRule" task="MPS_CLNT_API_SetFirewallRule" value="211" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_GetConfig" task="MPS_CLNT_API_GetConfig" value="212" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_GetConfig" task="MPS_CLNT_API_GetConfig" value="213" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_SetConfig" task="MPS_CLNT_API_SetConfig" value="214" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_SetConfig" task="MPS_CLNT_API_SetConfig" value="215" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_GetGlobalConfig" task="MPS_CLNT_API_GetGlobalConfig" value="216" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_GetGlobalConfig" task="MPS_CLNT_API_GetGlobalConfig" value="217" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_SetGlobalConfig" task="MPS_CLNT_API_SetGlobalConfig" value="218" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_SetGlobalConfig" task="MPS_CLNT_API_SetGlobalConfig" value="219" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_OpenPolicyStore" task="MPS_CLNT_API_OpenPolicyStore" value="220" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_OpenPolicyStore" task="MPS_CLNT_API_OpenPolicyStore" value="221" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_ClosePolicyStore" task="MPS_CLNT_API_ClosePolicyStore" value="222" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_ClosePolicyStore" task="MPS_CLNT_API_ClosePolicyStore" value="223" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_AddConnectionSecurityRule" task="MPS_CLNT_API_AddConnectionSecurityRule" value="224" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_AddConnectionSecurityRule" task="MPS_CLNT_API_AddConnectionSecurityRule" value="225" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_SetConnectionSecurityRule" task="MPS_CLNT_API_SetConnectionSecurityRule" value="226" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_SetConnectionSecurityRule" task="MPS_CLNT_API_SetConnectionSecurityRule" value="227" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_DeleteConnectionSecurityRule" task="MPS_CLNT_API_DeleteConnectionSecurityRule" value="228" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_DeleteConnectionSecurityRule" task="MPS_CLNT_API_DeleteConnectionSecurityRule" value="229" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_DeleteAllConnectionSecurityRules" task="MPS_CLNT_API_DeleteAllConnectionSecurityRules" value="230" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_DeleteAllConnectionSecurityRules" task="MPS_CLNT_API_DeleteAllConnectionSecurityRules" value="231" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_EnumConnectionSecurityRules" task="MPS_CLNT_API_EnumConnectionSecurityRules" value="232" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_EnumConnectionSecurityRules" task="MPS_CLNT_API_EnumConnectionSecurityRules" value="233" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_AddAuthenticationSet" task="MPS_CLNT_API_AddAuthenticationSet" value="234" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_AddAuthenticationSet" task="MPS_CLNT_API_AddAuthenticationSet" value="235" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_DeleteAuthenticationSet" task="MPS_CLNT_API_DeleteAuthenticationSet" value="236" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_DeleteAuthenticationSet" task="MPS_CLNT_API_DeleteAuthenticationSet" value="237" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_SetAuthenticationSet" task="MPS_CLNT_API_SetAuthenticationSet" value="238" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_SetAuthenticationSet" task="MPS_CLNT_API_SetAuthenticationSet" value="239" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_DeleteAllAuthenticationSets" task="MPS_CLNT_API_DeleteAllAuthenticationSets" value="240" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_DeleteAllAuthenticationSets" task="MPS_CLNT_API_DeleteAllAuthenticationSets" value="241" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_EnumAuthenticationSets" task="MPS_CLNT_API_EnumAuthenticationSets" value="242" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_EnumAuthenticationSets" task="MPS_CLNT_API_EnumAuthenticationSets" value="243" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_AddCryptoSet" task="MPS_CLNT_API_AddCryptoSet" value="244" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_AddCryptoSet" task="MPS_CLNT_API_AddCryptoSet" value="245" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_SetCryptoSet" task="MPS_CLNT_API_SetCryptoSet" value="246" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_SetCryptoSet" task="MPS_CLNT_API_SetCryptoSet" value="247" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_DeleteCryptoSet" task="MPS_CLNT_API_DeleteCryptoSet" value="248" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_DeleteCryptoSet" task="MPS_CLNT_API_DeleteCryptoSet" value="249" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_DeleteAllCryptoSets" task="MPS_CLNT_API_DeleteAllCryptoSets" value="250" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_DeleteAllCryptoSets" task="MPS_CLNT_API_DeleteAllCryptoSets" value="251" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_EnumCryptoSets" task="MPS_CLNT_API_EnumCryptoSets" value="252" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_EnumCryptoSets" task="MPS_CLNT_API_EnumCryptoSets" value="253" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_EnumPhase1SAs" task="MPS_CLNT_API_EnumPhase1SAs" value="254" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_EnumPhase1SAs" task="MPS_CLNT_API_EnumPhase1SAs" value="255" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_DeletePhase1SAs" task="MPS_CLNT_API_DeletePhase1SAs" value="256" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_DeletePhase1SAs" task="MPS_CLNT_API_DeletePhase1SAs" value="257" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_EnumPhase2SAs" task="MPS_CLNT_API_EnumPhase2SAs" value="258" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_EnumPhase2SAs" task="MPS_CLNT_API_EnumPhase2SAs" value="259" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_VerifyFirewallRule" task="MPS_CLNT_API_VerifyFirewallRule" value="260" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_VerifyFirewallRule" task="MPS_CLNT_API_VerifyFirewallRule" value="261" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_VerifyConnectionSecurityRule" task="MPS_CLNT_API_VerifyConnectionSecurityRule" value="262" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_VerifyConnectionSecurityRule" task="MPS_CLNT_API_VerifyConnectionSecurityRule" value="263" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_VerifyAuthenticationSet" task="MPS_CLNT_API_VerifyAuthenticationSet" value="264" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_VerifyAuthenticationSet" task="MPS_CLNT_API_VerifyAuthenticationSet" value="265" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_VerifyCryptoSet" task="MPS_CLNT_API_VerifyCryptoSet" value="266" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_VerifyCryptoSet" task="MPS_CLNT_API_VerifyCryptoSet" value="267" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_ImportPolicy" task="MPS_CLNT_API_ImportPolicy" value="268" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_ImportPolicy" task="MPS_CLNT_API_ImportPolicy" value="269" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_ExportPolicy" task="MPS_CLNT_API_ExportPolicy" value="270" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_ExportPolicy" task="MPS_CLNT_API_ExportPolicy" value="271" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_DeletePhase2SAs" task="MPS_CLNT_API_DeletePhase2SAs" value="272" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_DeletePhase2SAs" task="MPS_CLNT_API_DeletePhase2SAs" value="273" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_FreeFirewallRules" task="MPS_CLNT_API_FreeFirewallRules" value="274" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_FreeFirewallRules" task="MPS_CLNT_API_FreeFirewallRules" value="275" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_FreeConnectionSecurityRules" task="MPS_CLNT_API_FreeConnectionSecurityRules" value="276" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_FreeConnectionSecurityRules" task="MPS_CLNT_API_FreeConnectionSecurityRules" value="277" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_FreeAuthenticationSets" task="MPS_CLNT_API_FreeAuthenticationSets" value="278" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_FreeAuthenticationSets" task="MPS_CLNT_API_FreeAuthenticationSets" value="279" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_FreeCryptoSets" task="MPS_CLNT_API_FreeCryptoSets" value="280" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_FreeCryptoSets" task="MPS_CLNT_API_FreeCryptoSets" value="281" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_FreePhase1SAs" task="MPS_CLNT_API_FreePhase1SAs" value="282" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_FreePhase1SAs" task="MPS_CLNT_API_FreePhase1SAs" value="283" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_FreePhase2SAs" task="MPS_CLNT_API_FreePhase2SAs" value="284" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_FreePhase2SAs" task="MPS_CLNT_API_FreePhase2SAs" value="285" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_StatusMessageFromStatusCode" task="MPS_CLNT_API_StatusMessageFromStatusCode" value="286" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_StatusMessageFromStatusCode" task="MPS_CLNT_API_StatusMessageFromStatusCode" value="287" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_FreeMainModeRules" task="MPS_CLNT_API_FreeMainModeRules" value="288" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_FreeMainModeRules" task="MPS_CLNT_API_FreeMainModeRules" value="289" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_EnumMainModeRules" task="MPS_CLNT_API_EnumMainModeRules" value="290" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_EnumMainModeRules" task="MPS_CLNT_API_EnumMainModeRules" value="291" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_DeleteMainModeRule" task="MPS_CLNT_API_DeleteMainModeRule" value="292" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_DeleteMainModeRule" task="MPS_CLNT_API_DeleteMainModeRule" value="293" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_DeleteAllMainModeRules" task="MPS_CLNT_API_DeleteAllMainModeRules" value="294" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_DeleteAllMainModeRules" task="MPS_CLNT_API_DeleteAllMainModeRules" value="295" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_AddMainModeRule" task="MPS_CLNT_API_AddMainModeRule" value="296" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_AddMainModeRule" task="MPS_CLNT_API_AddMainModeRule" value="297" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_SetMainModeRule" task="MPS_CLNT_API_SetMainModeRule" value="298" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_SetMainModeRule" task="MPS_CLNT_API_SetMainModeRule" value="299" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_VerifyMainModeRule" task="MPS_CLNT_API_VerifyMainModeRule" value="300" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_VerifyMainModeRule" task="MPS_CLNT_API_VerifyMainModeRule" value="301" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_QueryFirewallRules" task="MPS_CLNT_API_QueryFirewallRules" value="302" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_QueryFirewallRules" task="MPS_CLNT_API_QueryFirewallRules" value="303" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_QueryConnectionSecurityRules" task="MPS_CLNT_API_QueryConnectionSecurityRules" value="304" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_QueryConnectionSecurityRules" task="MPS_CLNT_API_QueryConnectionSecurityRules" value="305" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_QueryMainModeRules" task="MPS_CLNT_API_QueryMainModeRules" value="306" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_QueryMainModeRules" task="MPS_CLNT_API_QueryMainModeRules" value="307" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_QueryAuthenticationSets" task="MPS_CLNT_API_QueryAuthenticationSets" value="308" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_QueryAuthenticationSets" task="MPS_CLNT_API_QueryAuthenticationSets" value="309" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_QueryCryptoSets" task="MPS_CLNT_API_QueryCryptoSets" value="310" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_QueryCryptoSets" task="MPS_CLNT_API_QueryCryptoSets" value="311" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_VerifyFirewallRuleQuery" task="MPS_CLNT_API_VerifyFirewallRuleQuery" value="312" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_VerifyFirewallRuleQuery" task="MPS_CLNT_API_VerifyFirewallRuleQuery" value="313" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_VerifyConnectionSecurityRuleQuery" task="MPS_CLNT_API_VerifyConnectionSecurityRuleQuery" value="314" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_VerifyConnectionSecurityRuleQuery" task="MPS_CLNT_API_VerifyConnectionSecurityRuleQuery" value="315" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_VerifyMainModeRuleQuery" task="MPS_CLNT_API_VerifyMainModeRuleQuery" value="316" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_VerifyMainModeRuleQuery" task="MPS_CLNT_API_VerifyMainModeRuleQuery" value="317" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_VerifyAuthenticationSetQuery" task="MPS_CLNT_API_VerifyAuthenticationSetQuery" value="318" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_VerifyAuthenticationSetQuery" task="MPS_CLNT_API_VerifyAuthenticationSetQuery" value="319" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_VerifyCryptoSetQuery" task="MPS_CLNT_API_VerifyCryptoSetQuery" value="320" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_VerifyCryptoSetQuery" task="MPS_CLNT_API_VerifyCryptoSetQuery" value="321" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Start" symbol="MPS_CLNT_API_Enter_FreeQuery" task="MPS_CLNT_API_FreeQuery" value="322" />
          <event channel="defch" keywords="Client" level="win:Informational" opcode="win:Stop" symbol="MPS_CLNT_API_Exit_FreeQuery" task="MPS_CLNT_API_FreeQuery" value="323" />
        </events>
      </provider>
      <provider guid="{d1bc9aff-2abf-4d71-9146-ecb2a986eb85}" message="$(string.MpsSrvProviderNameOperational)" messageFileName="%SystemRoot%\system32\mpssvc.dll" name="Microsoft-Windows-Windows Firewall With Advanced Security" parameterFileName="%SystemRoot%\system32\mpssvc.dll" resourceFileName="%SystemRoot%\system32\mpssvc.dll" symbol="MS_MPS_SRV_Operational">
        <channels>
          <channel chid="WFOperational" enabled="true" message="$(string.OperationalChannel.Name)" name="Microsoft-Windows-Windows Firewall With Advanced Security/Firewall" type="Operational" />
          <channel access="O:BAG:SYD:(A;;0x7;;;SY)(A;;0x7;;;BA)(A;;0x7;;;S-1-5-80-3088073201-1464728630-1879813800-1107566885-823218052)" chid="WFConSec" enabled="true" isolation="System" message="$(string.ConSecChannel.Name)" name="Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurity" type="Operational" />
          <channel chid="WFOperationalVerbose" enabled="false" message="$(string.OperationalChannelVerbose.Name)" name="Microsoft-Windows-Windows Firewall With Advanced Security/FirewallVerbose" type="Operational" />
          <channel access="O:BAG:SYD:(A;;0x7;;;SY)(A;;0x7;;;BA)(A;;0x7;;;S-1-5-80-3088073201-1464728630-1879813800-1107566885-823218052)" chid="WFConSecVerbose" enabled="false" isolation="System" message="$(string.ConSecChannelVerbose.Name)" name="Microsoft-Windows-Windows Firewall With Advanced Security/ConnectionSecurityVerbose" type="Operational" />
          <channel access="O:BAG:SYD:(A;;0x7;;;SY)(A;;0x7;;;BA)(A;;0x7;;;S-1-5-80-3088073201-1464728630-1879813800-1107566885-823218052)" chid="NetworkIsolationOperational" enabled="false" isolation="System" message="$(string.NetworkIsolationOperational.Name)" name="Network Isolation Operational" type="Operational" />
        </channels>
        <keywords>
          <keyword mask="0x0000020000000000" name="ut:PiiPresent" symbol="KW_PII_PRESENT" />
          <keyword mask="0x0000000000000010" name="ut:AOAC" symbol="KW_AOAC" />
        </keywords>
        <templates>
          <template tid="tid_WFGlobalConfigurationChangedEvent">
            <data inType="win:UInt32" map="WFGlobalConfigurationType_ValueMap" name="SettingType" />
            <data inType="win:UInt32" name="SettingValueSize" />
            <data inType="win:Binary" length="SettingValueSize" name="SettingValue" />
            <data inType="win:UnicodeString" name="SettingValueDisplay" />
            <data inType="win:UInt32" map="WFOrigin_ValueMap" name="Origin" />
            <data inType="win:SID" name="ModifyingUser" />
            <data inType="win:UnicodeString" name="ModifyingApplication" />
          </template>
          <template tid="tid_WFProfileConfigurationChangedEvent">
            <data inType="win:UInt32" map="WFProfileType_ValueMap" name="Profiles" />
            <data inType="win:UInt32" map="WFProfileConfigurationType_ValueMap" name="SettingType" />
            <data inType="win:UInt32" name="SettingValueSize" />
            <data inType="win:Binary" length="SettingValueSize" name="SettingValue" />
            <data inType="win:UnicodeString" name="SettingValueString" />
            <data inType="win:UInt32" map="WFOrigin_ValueMap" name="Origin" />
            <data inType="win:SID" name="ModifyingUser" />
            <data inType="win:UnicodeString" name="ModifyingApplication" />
          </template>
          <template tid="tid_WFGroupPolicyErrorEvent">
            <data inType="win:Int32" name="ErrorCode" outType="win:HResult" />
          </template>
          <template tid="tid_WFStartupProfileConfigurationInfo">
            <data inType="win:UInt32" map="WFProfileType_ValueMap" name="Profile" />
            <data inType="win:UInt32" map="Enabled_Disabled_ValueMap" name="OpMode" />
            <data inType="win:UInt32" map="Enabled_Disabled_Inv_ValueMap" name="DisableStealthMode" />
            <data inType="win:UInt32" map="YesNo_ValueMap" name="BlockAllInbound" />
            <data inType="win:UInt32" map="Enabled_Disabled_Inv_ValueMap" name="DisableUnicastResponseToMultiCastBroadCast" />
            <data inType="win:UInt32" map="YesNo_ValueMap" name="LogDroppedPackets" />
            <data inType="win:UInt32" map="YesNo_ValueMap" name="LogSuccessfulConnections" />
            <data inType="win:UInt32" map="YesNo_ValueMap" name="LogIgnoredRules" />
            <data inType="win:UInt32" map="Enabled_Disabled_Inv_ValueMap" name="DisableInboundNotifications" />
            <data inType="win:UInt32" map="YesNo_ValueMap" name="AllowUserPrefMergeForApps" />
            <data inType="win:UInt32" map="YesNo_ValueMap" name="AllowUserPrefMergeForGlobalPorts" />
            <data inType="win:UInt32" map="YesNo_ValueMap" name="AllowLocalPolicyMerge" />
            <data inType="win:UInt32" map="YesNo_ValueMap" name="AllowIPSecPolicyMerge" />
            <data inType="win:UInt32" map="WFAllowBlock_ValueMap" name="DefaultOutboundAction" />
            <data inType="win:UInt32" map="WFAllowBlock_ValueMap" name="DefaultInboundAction" />
            <data inType="win:UInt32" map="Enabled_Disabled_ValueMap" name="RemoteAdministrationEnabled" />
            <data inType="win:UInt32" name="MaxLogFileSize" />
            <data inType="win:UnicodeString" name="LogFilePath" />
            <data inType="win:UInt32" name="DisabledInterfacesSize" />
            <data inType="win:Binary" length="DisabledInterfacesSize" name="DisabledInterfaces" />
            <data inType="win:UInt32" map="Enabled_Disabled_Inv_ValueMap" name="DisableStealthModeIPsecSecuredPacketExemption" />
          </template>
          <template tid="tid_WFStartupConfigurationInfo">
            <data inType="win:UInt32" map="WFProfileType_ValueMap" name="CurrentProfile" />
            <data inType="win:UInt32" name="SAIdleTime" />
            <data inType="win:UInt32" map="WFPSK_ValueMap" name="PresharedKeyEncoding" />
            <data inType="win:UInt32" map="WFIPSecExempt_ValueMap" name="IPSecExempt" />
            <data inType="win:UInt32" map="WFCRL_ValueMap" name="CrlCheck" />
            <data inType="win:UInt32" map="IPSecThroughNAT_ValueMap" name="IPSecThroughNAT" />
            <data inType="win:UInt32" name="PolicyVersionSupported" outType="win:HexInt32" />
            <data inType="win:UInt32" name="PolicyVersion" outType="win:HexInt32" />
            <data inType="win:UInt32" name="BinaryVersionSupported" outType="win:HexInt32" />
            <data inType="win:UInt32" map="Enabled_Disabled_Inv_ValueMap" name="DisableStatefulFTP" />
            <data inType="win:UInt32" map="YesNo_ValueMap" name="GroupPolicyApplied" />
            <data inType="win:UnicodeString" name="RemoteMachineAuthorizationList" />
            <data inType="win:UnicodeString" name="RemoteUserAuthorizationList" />
          </template>
          <template tid="tid_WFUnableToShowQueryUserNotificationEvent">
            <data inType="win:UInt32" map="QU_NotShown_Reason_ValueMap" name="ReasonCode" />
            <data inType="win:UnicodeString" name="ApplicationPath" />
            <data inType="win:UInt8" map="IPVersion_ValueMap" name="IPVersion" />
            <data inType="win:UInt16" map="Protocol_ValueMap" name="Protocol" />
            <data inType="win:UInt16" name="Port" />
            <data inType="win:UInt32" name="ProcessId" />
            <data inType="win:SID" name="ModifyingUser" />
          </template>
          <template tid="tid_WFObjectDeleteEvent">
            <data inType="win:UnicodeString" name="RuleId" />
            <data inType="win:UnicodeString" name="RuleName" />
            <data inType="win:SID" name="ModifyingUser" />
            <data inType="win:UnicodeString" name="ModifyingApplication" />
          </template>
          <template tid="tid_WFRuleAddOrChangeEvent">
            <data inType="win:UnicodeString" name="RuleId" />
            <data inType="win:UnicodeString" name="RuleName" />
            <data inType="win:UInt32" map="WFOrigin_ValueMap" name="Origin" />
            <data inType="win:UnicodeString" name="ApplicationPath" />
            <data inType="win:UnicodeString" name="ServiceName" />
            <data inType="win:UInt32" map="WFDir_ValueMap" name="Direction" />
            <data inType="win:UInt16" map="Protocol_ValueMap" name="Protocol" />
            <data inType="win:UnicodeString" name="LocalPorts" />
            <data inType="win:UnicodeString" name="RemotePorts" />
            <data inType="win:UInt32" map="WFAction_ValueMap" name="Action" />
            <data inType="win:UInt32" map="WFProfileType_ValueMap" name="Profiles" />
            <data inType="win:UnicodeString" name="LocalAddresses" />
            <data inType="win:UnicodeString" name="RemoteAddresses" />
            <data inType="win:UnicodeString" name="RemoteMachineAuthorizationList" />
            <data inType="win:UnicodeString" name="RemoteUserAuthorizationList" />
            <data inType="win:UnicodeString" name="EmbeddedContext" />
            <data inType="win:UInt16" name="Flags" />
            <data inType="win:UInt16" map="YesNo_ValueMap" name="Active" />
            <data inType="win:UInt16" map="EdgeTraversal_ValueMap" name="EdgeTraversal" />
            <data inType="win:UInt16" map="YesNo_ValueMap" name="LooseSourceMapped" />
            <data inType="win:UInt16" map="SecurityOptions_ValueMap" name="SecurityOptions" />
            <data inType="win:SID" name="ModifyingUser" />
            <data inType="win:UnicodeString" name="ModifyingApplication" />
            <data inType="win:UInt16" name="SchemaVersion" />
            <data inType="win:UInt32" name="RuleStatus" />
            <data inType="win:UInt16" map="YesNo_ValueMap" name="LocalOnlyMapped" />
          </template>
          <template tid="tid_WFInterfaceProfileChangedEvent">
            <data inType="win:GUID" name="InterfaceGuid" />
            <data inType="win:UnicodeString" name="InterfaceName" />
            <data inType="win:UInt32" map="WFProfileType_ValueMap" name="OldProfile" />
            <data inType="win:UInt32" map="WFProfileType_ValueMap" name="NewProfile" />
          </template>
          <template tid="tid_WFCSRuleAddOrChangeEvent">
            <data inType="win:UnicodeString" name="RuleId" />
            <data inType="win:UnicodeString" name="RuleName" />
            <data inType="win:UInt32" map="WFOrigin_ValueMap" name="Origin" />
            <data inType="win:UInt16" map="YesNo_ValueMap" name="Active" />
            <data inType="win:UInt16" map="Protocol_ValueMap" name="Protocol" />
            <data inType="win:UnicodeString" name="Endpoint1Ports" />
            <data inType="win:UnicodeString" name="Endpoint2Ports" />
            <data inType="win:UInt32" name="LocalTunnelEndpointV4" outType="win:IPv4" />
            <data inType="win:Binary" length="16" name="LocalTunnelEndpointV6" outType="win:IPv6" />
            <data inType="win:UInt32" name="RemoteTunnelEndpointV4" outType="win:IPv4" />
            <data inType="win:Binary" length="16" name="RemoteTunnelEndpointV6" outType="win:IPv6" />
            <data inType="win:UnicodeString" name="Phase1AuthSetId" />
            <data inType="win:UnicodeString" name="Phase2AuthSetId" />
            <data inType="win:UnicodeString" name="Phase2CryptoSetId" />
            <data inType="win:UInt32" map="WFCSAction_ValueMap" name="Action" />
            <data inType="win:UInt32" map="WFProfileType_ValueMap" name="Profiles" />
            <data inType="win:UnicodeString" name="Endpoint1" />
            <data inType="win:UnicodeString" name="Endpoint2" />
            <data inType="win:UnicodeString" name="MMParentRuleId" />
            <data inType="win:UnicodeString" name="EmbeddedContext" />
            <data inType="win:UInt16" name="Flags" />
            <data inType="win:UInt16" map="YesNo_ValueMap" name="IsDTM" />
            <data inType="win:UInt16" map="YesNo_ValueMap" name="ApplyAuthZ" />
            <data inType="win:UInt16" map="YesNo_ValueMap" name="BypassTunnelIfEncrypted" />
            <data inType="win:UInt16" map="YesNo_ValueMap" name="NoIPSecOnOutbound" />
            <data inType="win:SID" name="ModifyingUser" />
            <data inType="win:UnicodeString" name="ModifyingApplication" />
            <data inType="win:UInt16" name="SchemaVersion" />
            <data inType="win:UInt32" name="RuleStatus" />
          </template>
          <template tid="tid_WFMMRuleAddOrChangeEvent">
            <data inType="win:UnicodeString" name="RuleId" />
            <data inType="win:UnicodeString" name="RuleName" />
            <data inType="win:UInt32" map="WFProfileType_ValueMap" name="Profiles" />
            <data inType="win:UnicodeString" name="Endpoint1" />
            <data inType="win:UnicodeString" name="Endpoint2" />
            <data inType="win:UnicodeString" name="Phase1AuthSetId" />
            <data inType="win:UnicodeString" name="Phase1CryptoSetId" />
            <data inType="win:UInt16" name="Flags" />
            <data inType="win:UInt16" map="YesNo_ValueMap" name="Active" />
            <data inType="win:UnicodeString" name="EmbeddedContext" />
            <data inType="win:UInt32" map="WFOrigin_ValueMap" name="Origin" />
            <data inType="win:SID" name="ModifyingUser" />
            <data inType="win:UnicodeString" name="ModifyingApplication" />
            <data inType="win:UInt16" name="SchemaVersion" />
            <data inType="win:UInt32" name="RuleStatus" />
          </template>
          <template tid="tid_WFPhase1CryptoSetAddOrChangeEvent">
            <data inType="win:UnicodeString" name="SetId" />
            <data inType="win:UnicodeString" name="SetName" />
            <data inType="win:UnicodeString" name="EmbeddedContext" />
            <data inType="win:UInt32" map="WFOrigin_ValueMap" name="Origin" />
            <data inType="win:UInt32" name="CryptoSetFlags" />
            <data inType="win:UInt16" map="WFPhase1CryptoSetFlag_ValueMap" name="Flags" />
            <data inType="win:UInt32" name="NumSuites" />
            <data inType="win:UInt32" name="SuitesBinaryLength" />
            <data inType="win:Binary" length="SuitesBinaryLength" name="CryptoSuites" />
            <data inType="win:UInt32" name="TimeOutMinutes" />
            <data inType="win:UInt32" name="TimeOutSessions" />
            <data inType="win:SID" name="ModifyingUser" />
            <data inType="win:UnicodeString" name="ModifyingApplication" />
            <data inType="win:UInt16" name="SchemaVersion" />
            <data inType="win:UInt32" name="RuleStatus" />
          </template>
          <template tid="tid_WFPhase2CryptoSetAddOrChangeEvent">
            <data inType="win:UnicodeString" name="SetId" />
            <data inType="win:UnicodeString" name="SetName" />
            <data inType="win:UnicodeString" name="EmbeddedContext" />
            <data inType="win:UInt32" map="WFOrigin_ValueMap" name="Origin" />
            <data inType="win:UInt32" name="CryptoSetFlags" />
            <data inType="win:UInt32" map="WFPhase2CryptoSetPfs_ValueMap" name="Pfs" />
            <data inType="win:UInt32" name="NumSuites" />
            <data inType="win:UInt32" name="SuitesBinaryLength" />
            <data inType="win:Binary" length="SuitesBinaryLength" name="CryptoSuites" />
            <data inType="win:SID" name="ModifyingUser" />
            <data inType="win:UnicodeString" name="ModifyingApplication" />
            <data inType="win:UInt16" name="SchemaVersion" />
            <data inType="win:UInt32" name="RuleStatus" />
          </template>
          <template tid="tid_WFAuthenticationSetAddOrChangeEvent">
            <data inType="win:UnicodeString" name="SetId" />
            <data inType="win:UnicodeString" name="SetName" />
            <data inType="win:UInt32" map="WFIPsecPhase_ValueMap" name="IPsec Phase" />
            <data inType="win:UnicodeString" name="EmbeddedContext" />
            <data inType="win:UInt32" map="WFOrigin_ValueMap" name="Origin" />
            <data inType="win:UInt32" name="AuthSetFlags" />
            <data inType="win:UInt32" name="NumSuites" />
            <data inType="win:UInt32" name="SuitesBinaryLength" />
            <data inType="win:Binary" length="SuitesBinaryLength" name="AuthenticationSuites" />
            <data inType="win:SID" name="ModifyingUser" />
            <data inType="win:UnicodeString" name="ModifyingApplication" />
            <data inType="win:UInt16" name="SchemaVersion" />
            <data inType="win:UInt32" name="RuleStatus" />
          </template>
          <template tid="tid_WFAuthenticationSetDeleteEvent">
            <data inType="win:UnicodeString" name="RuleId" />
            <data inType="win:UnicodeString" name="RuleName" />
            <data inType="win:UInt32" map="WFIPsecPhase_ValueMap" name="IPsec Phase" />
            <data inType="win:SID" name="ModifyingUser" />
            <data inType="win:UnicodeString" name="ModifyingApplication" />
          </template>
          <template tid="tid_WFBatchUpdateEvent">
            <data inType="win:UInt32" map="WFStoreType_ValueMap" name="Store Type" />
            <data inType="win:SID" name="ModifyingUser" />
            <data inType="win:UnicodeString" name="ModifyingApplication" />
          </template>
          <template tid="tid_WFRestoreDefaultsEvent">
            <data inType="win:SID" name="ModifyingUser" />
            <data inType="win:UnicodeString" name="ModifyingApplication" />
          </template>
          <template tid="tid_WFBatchUpdateCSObjectsEvent">
            <data inType="win:UInt32" map="WFIPsecPhase_ValueMap" name="IPsec Phase" />
            <data inType="win:UInt32" map="WFStoreType_ValueMap" name="Store Type" />
            <data inType="win:SID" name="ModifyingUser" />
            <data inType="win:UnicodeString" name="ModifyingApplication" />
          </template>
          <template tid="tid_WFCSRuleNotAppliedEvent">
            <data inType="win:UnicodeString" name="ID" />
            <data inType="win:UnicodeString" name="Name" />
            <data inType="win:UnicodeString" name="Reason" />
            <data inType="win:UInt32" name="RuleStatus" />
          </template>
          <template tid="tid_NetIsoHttpProxyChangedEvent">
            <data inType="win:UInt32" map="NetIsoHttpProxyChangeType_ValueMap" name="ChangeType" />
            <data inType="win:UnicodeString" name="All Proxies" />
            <data inType="win:UnicodeString" name="All Domain Proxies" />
            <data inType="win:UnicodeString" name="GP Configured Domain Proxies" />
            <data inType="win:UnicodeString" name="GP Configured Local Proxies" />
            <data inType="win:UnicodeString" name="All DA Nat64 Proxies" />
            <data inType="win:UInt32" map="YesNo_ValueMap" name="GP Is Authoritative" />
          </template>
          <template tid="tid_NetIsoSubnetsChangedEvent">
            <data inType="win:UInt32" map="NetIsoSubnetsChangeType_ValueMap" name="ChangeType" />
            <data inType="win:UnicodeString" name="All Domain Proxies" />
            <data inType="win:UnicodeString" name="GP Configured Domain Subnets" />
            <data inType="win:UnicodeString" name="All DA Nat64 Domain Subnets" />
            <data inType="win:UInt32" map="YesNo_ValueMap" name="GP Is Authoritative" />
          </template>
          <template tid="tid_NetIsoCapabilityDefinitionChangedEvent">
            <data inType="win:UInt32" map="NetIsoCapabilityChangeType_ValueMap" name="ChangeType" />
            <data inType="win:UInt32" map="NetIsoCapabilityType_ValueMap" name="Capability" />
            <data inType="win:UInt32" map="WFProfileType_ValueMap" name="Profile" />
            <data inType="win:UnicodeString" name="IP Range Definition" />
          </template>
        </templates>
        <events>
          <event channel="WFOperationalVerbose" level="win:Informational" message="$(string.WFStartupConfigurationInfoMessage)" opcode="win:Info" symbol="WFStartupConfigurationInfo" template="tid_WFStartupConfigurationInfo" value="2000" />
          <event channel="WFOperationalVerbose" level="win:Informational" message="$(string.WFStartupProfileConfigurationInfoMessage)" opcode="win:Info" symbol="WFStartupProfileConfigurationInfo" template="tid_WFStartupProfileConfigurationInfo" value="2001" />
          <event channel="WFOperational" level="win:Informational" message="$(string.WFGlobalConfigurationChangedEventMessage)" opcode="win:Info" symbol="WFGlobalConfigurationChangedEvent" template="tid_WFGlobalConfigurationChangedEvent" value="2002" />
          <event channel="WFOperational" level="win:Informational" message="$(string.WFProfileConfigurationChangedEventMessage)" opcode="win:Info" symbol="WFProfileConfigurationChangedEvent" template="tid_WFProfileConfigurationChangedEvent" value="2003" />
          <event channel="WFOperational" keywords="ut:PiiPresent" level="win:Informational" message="$(string.WFRuleAddEventMessage)" opcode="win:Info" symbol="WFRuleAddEvent" template="tid_WFRuleAddOrChangeEvent" value="2004" />
          <event channel="WFOperational" keywords="ut:PiiPresent" level="win:Informational" message="$(string.WFRuleChangeEventMessage)" opcode="win:Info" symbol="WFRuleChangeEvent" template="tid_WFRuleAddOrChangeEvent" value="2005" />
          <event channel="WFOperational" keywords="ut:PiiPresent" level="win:Informational" message="$(string.WFRuleDeleteEventMessage)" opcode="win:Info" symbol="WFRuleDeleteEvent" template="tid_WFObjectDeleteEvent" value="2006" />
          <event channel="WFOperationalVerbose" level="win:Informational" message="$(string.WFRuleAddStartupEventMessage)" opcode="win:Info" symbol="WFStartupRuleAddEvent" template="tid_WFRuleAddOrChangeEvent" value="2007" />
          <event channel="WFOperational" level="win:Informational" message="$(string.WFGroupPolicySuccessEventMessage)" opcode="win:Info" symbol="WFGroupPolicySuccessEvent" value="2008" />
          <event channel="WFOperational" level="win:Error" message="$(string.WFGroupPolicyErrorEventMessage)" opcode="win:Info" symbol="WFGroupPolicyErrorEvent" template="tid_WFGroupPolicyErrorEvent" value="2009" />
          <event channel="WFOperational" level="win:Informational" message="$(string.WFInterfaceProfileChangedEventMessage)" opcode="win:Info" symbol="WFInterfaceProfileChanged" template="tid_WFInterfaceProfileChangedEvent" value="2010" />
          <event channel="WFOperational" level="win:Informational" message="$(string.WFUnableToShowQueryUserNotificationEventMessage)" opcode="win:Info" symbol="WFUnableToShowQueryUserNotificationEvent" template="tid_WFUnableToShowQueryUserNotificationEvent" value="2011" />
          <event channel="WFConSec" level="win:Informational" message="$(string.WFCSRuleAddEventMessage)" opcode="win:Info" symbol="WFCSRuleAddEvent" template="tid_WFCSRuleAddOrChangeEvent" value="2012" />
          <event channel="WFConSec" level="win:Informational" message="$(string.WFCSRuleChangeEventMessage)" opcode="win:Info" symbol="WFCSRuleChangeEvent" template="tid_WFCSRuleAddOrChangeEvent" value="2013" />
          <event channel="WFConSec" level="win:Informational" message="$(string.WFCSRuleDeletedEventMessage)" opcode="win:Info" symbol="WFCSRuleDeleteEvent" template="tid_WFObjectDeleteEvent" value="2014" />
          <event channel="WFConSecVerbose" level="win:Informational" message="$(string.WFCSStartupRuleAddEventMessage)" opcode="win:Info" symbol="WFCSStartupRuleAddEvent" template="tid_WFCSRuleAddOrChangeEvent" value="2015" />
          <event channel="WFConSec" level="win:Informational" message="$(string.WFMMRuleAddEventMessage)" opcode="win:Info" symbol="WFMMRuleAddEvent" template="tid_WFMMRuleAddOrChangeEvent" value="2016" />
          <event channel="WFConSec" level="win:Informational" message="$(string.WFMMRuleChangeEventMessage)" opcode="win:Info" symbol="WFMMRuleChangeEvent" template="tid_WFMMRuleAddOrChangeEvent" value="2017" />
          <event channel="WFConSec" level="win:Informational" message="$(string.WFMMRuleDeletedEventMessage)" opcode="win:Info" symbol="WFMMRuleDeleteEvent" template="tid_WFObjectDeleteEvent" value="2018" />
          <event channel="WFConSecVerbose" level="win:Informational" message="$(string.WFMMStartupRuleAddEventMessage)" opcode="win:Info" symbol="WFMMStartupRuleAddEvent" template="tid_WFMMRuleAddOrChangeEvent" value="2019" />
          <event channel="WFConSec" level="win:Informational" message="$(string.WFPhase1CryptoSetAddEventMessage)" opcode="win:Info" symbol="WFPhase1CryptoSetAddEvent" template="tid_WFPhase1CryptoSetAddOrChangeEvent" value="2020" />
          <event channel="WFConSec" level="win:Informational" message="$(string.WFPhase1CryptoSetChangeEventMessage)" opcode="win:Info" symbol="WFPhase1CryptoSetChangeEvent" template="tid_WFPhase1CryptoSetAddOrChangeEvent" value="2021" />
          <event channel="WFConSec" level="win:Informational" message="$(string.WFPhase1CryptoSetDeleteEventMessage)" opcode="win:Info" symbol="WFPhase1CryptoSetDeleteEvent" template="tid_WFObjectDeleteEvent" value="2022" />
          <event channel="WFConSecVerbose" level="win:Informational" message="$(string.WFPhase1CryptoSetStartupAddEventMessage)" opcode="win:Info" symbol="WFPhase1CryptoSetStartupAddEvent" template="tid_WFPhase1CryptoSetAddOrChangeEvent" value="2023" />
          <event channel="WFConSec" level="win:Informational" message="$(string.WFPhase2CryptoSetAddEventMessage)" opcode="win:Info" symbol="WFPhase2CryptoSetAddEvent" template="tid_WFPhase2CryptoSetAddOrChangeEvent" value="2024" />
          <event channel="WFConSec" level="win:Informational" message="$(string.WFPhase2CryptoSetChangeEventMessage)" opcode="win:Info" symbol="WFPhase2CryptoSetChangeEvent" template="tid_WFPhase2CryptoSetAddOrChangeEvent" value="2025" />
          <event channel="WFConSec" level="win:Informational" message="$(string.WFPhase2CryptoSetDeleteEventMessage)" opcode="win:Info" symbol="WFPhase2CryptoSetDeleteEvent" template="tid_WFObjectDeleteEvent" value="2026" />
          <event channel="WFConSecVerbose" level="win:Informational" message="$(string.WFPhase2CryptoSetStartupAddEventMessage)" opcode="win:Info" symbol="WFPhase2CryptoSetStartupAddEvent" template="tid_WFPhase2CryptoSetAddOrChangeEvent" value="2027" />
          <event channel="WFConSec" level="win:Informational" message="$(string.WFAuthenticationSetAddEventMessage)" opcode="win:Info" symbol="WFAuthenticationSetAddEvent" template="tid_WFAuthenticationSetAddOrChangeEvent" value="2028" />
          <event channel="WFConSec" level="win:Informational" message="$(string.WFAuthenticationSetChangeEventMessage)" opcode="win:Info" symbol="WFAuthenticationSetChangeEvent" template="tid_WFAuthenticationSetAddOrChangeEvent" value="2029" />
          <event channel="WFConSec" level="win:Informational" message="$(string.WFAuthenticationSetDeleteEventMessage)" opcode="win:Info" symbol="WFAuthenticationSetDeleteEvent" template="tid_WFAuthenticationSetDeleteEvent" value="2030" />
          <event channel="WFConSecVerbose" level="win:Informational" message="$(string.WFAuthenticationSetStartupAddEventMessage)" opcode="win:Info" symbol="WFAuthenticationSetStartupAddEvent" template="tid_WFAuthenticationSetAddOrChangeEvent" value="2031" />
          <event channel="WFOperational" level="win:Informational" message="$(string.WFRestoreDefaultsEventMessage)" opcode="win:Info" symbol="WFRestoreDefaultsEvent" template="tid_WFRestoreDefaultsEvent" value="2032" />
          <event channel="WFOperational" level="win:Informational" message="$(string.WFAllFirewallRulesDeletedEventMessage)" opcode="win:Info" symbol="WFAllFirewallRulesDeletedEvent" template="tid_WFBatchUpdateEvent" value="2033" />
          <event channel="WFConSec" level="win:Informational" message="$(string.WFAllCSRulesDeletedEventMessage)" opcode="win:Info" symbol="WFAllCSRulesDeletedEvent" template="tid_WFBatchUpdateEvent" value="2034" />
          <event channel="WFConSec" level="win:Informational" message="$(string.WFAllMMRulesDeletedEventMessage)" opcode="win:Info" symbol="WFAllMMRulesDeletedEvent" template="tid_WFBatchUpdateEvent" value="2035" />
          <event channel="WFConSec" level="win:Informational" message="$(string.WFAllAuthenticationSetsDeletedEventMessage)" opcode="win:Info" symbol="WFAllAuthenticationSetsDeletedEvent" template="tid_WFBatchUpdateCSObjectsEvent" value="2036" />
          <event channel="WFConSec" level="win:Informational" message="$(string.WFAllCryptoSetsDeletedEventMessage)" opcode="win:Info" symbol="WFAllCryptoSetsDeletedEvent" template="tid_WFBatchUpdateCSObjectsEvent" value="2037" />
          <event channel="WFConSec" level="win:Informational" message="$(string.WFCSRuleNotAppliedEventMessage)" opcode="win:Info" symbol="WFCSRuleNotApplied" template="tid_WFCSRuleNotAppliedEvent" value="2038" />
          <event channel="NetworkIsolationOperational" keywords="ut:AOAC" level="win:Informational" message="$(string.NetIsoHttpProxyChangedEventMessage)" opcode="win:Info" symbol="NetIsoHttpProxyChangedEvent" template="tid_NetIsoHttpProxyChangedEvent" value="2039" />
          <event channel="NetworkIsolationOperational" keywords="ut:AOAC" level="win:Informational" message="$(string.NetIsoSubnetsChangedEventMessage)" opcode="win:Info" symbol="NetIsoSubnetsChangedEvent" template="tid_NetIsoSubnetsChangedEvent" value="2040" />
          <event channel="NetworkIsolationOperational" keywords="ut:AOAC" level="win:Informational" message="$(string.NetIsoCapabilityDefinitionChangedEventMessage)" opcode="win:Info" symbol="NetIsoCapabilityDefinitionChangedEvent" template="tid_NetIsoCapabilityDefinitionChangedEvent" value="2041" />
        </events>
        <maps>
          <valueMap name="WFProfileConfigurationType_ValueMap">
            <map message="$(string.WFSettingType_ValueMap.FW_PROFILE_CONFIG_ENABLE_FW)" value="1" />
            <map message="$(string.WFSettingType_ValueMap.FW_PROFILE_CONFIG_DISABLE_STEALTH_MODE)" value="2" />
            <map message="$(string.WFSettingType_ValueMap.FW_PROFILE_CONFIG_SHIELDED)" value="3" />
            <map message="$(string.WFSettingType_ValueMap.FW_PROFILE_CONFIG_DISABLE_UNICAST_RESPONSES_TO_MULTICAST_BROADCAST)" value="4" />
            <map message="$(string.WFSettingType_ValueMap.FW_PROFILE_CONFIG_LOG_DROPPED_PACKETS)" value="5" />
            <map message="$(string.WFSettingType_ValueMap.FW_PROFILE_CONFIG_LOG_SUCCESS_CONNECTIONS)" value="6" />
            <map message="$(string.WFSettingType_ValueMap.FW_PROFILE_CONFIG_LOG_IGNORED_RULES)" value="7" />
            <map message="$(string.WFSettingType_ValueMap.FW_PROFILE_CONFIG_LOG_MAX_FILE_SIZE)" value="8" />
            <map message="$(string.WFSettingType_ValueMap.FW_PROFILE_CONFIG_LOG_FILE_PATH)" value="9" />
            <map message="$(string.WFSettingType_ValueMap.FW_PROFILE_CONFIG_DISABLE_INBOUND_NOTIFICATIONS)" value="10" />
            <map message="$(string.WFSettingType_ValueMap.FW_PROFILE_CONFIG_AUTH_APPS_ALLOW_USER_PREF_MERGE)" value="11" />
            <map message="$(string.WFSettingType_ValueMap.FW_PROFILE_CONFIG_GLOBAL_PORTS_ALLOW_USER_PREF_MERGE)" value="12" />
            <map message="$(string.WFSettingType_ValueMap.FW_PROFILE_CONFIG_ALLOW_LOCAL_POLICY_MERGE)" value="13" />
            <map message="$(string.WFSettingType_ValueMap.FW_PROFILE_CONFIG_ALLOW_LOCAL_IPSEC_POLICY_MERGE)" value="14" />
            <map message="$(string.WFSettingType_ValueMap.FW_PROFILE_CONFIG_DISABLED_INTERFACES)" value="15" />
            <map message="$(string.WFSettingType_ValueMap.FW_PROFILE_CONFIG_DEFAULT_OUTBOUND_ACTION)" value="16" />
            <map message="$(string.WFSettingType_ValueMap.FW_PROFILE_CONFIG_DEFAULT_INBOUND_ACTION)" value="17" />
            <map message="$(string.WFSettingType_ValueMap.FW_PROFILE_CONFIG_DISABLE_STEALTH_MODE_IPSEC_SECURED_PACKET_EXEMPTION)" value="18" />
          </valueMap>
          <valueMap name="WFGlobalConfigurationType_ValueMap">
            <map message="$(string.WFSettingType_ValueMap.FW_GLOBAL_CONFIG_CURRENT_PROFILE)" value="2" />
            <map message="$(string.WFSettingType_ValueMap.FW_GLOBAL_CONFIG_DISABLE_STATEFUL_FTP)" value="3" />
            <map message="$(string.WFSettingType_ValueMap.FW_GLOBAL_CONFIG_DISABLE_STATEFUL_PPTP)" value="4" />
            <map message="$(string.WFSettingType_ValueMap.FW_GLOBAL_CONFIG_SA_IDLE_TIME)" value="5" />
            <map message="$(string.WFSettingType_ValueMap.FW_GLOBAL_CONFIG_PRESHARED_KEY_ENCODING)" value="6" />
            <map message="$(string.WFSettingType_ValueMap.FW_GLOBAL_CONFIG_IPSEC_EXEMPT)" value="7" />
            <map message="$(string.WFSettingType_ValueMap.FW_GLOBAL_CONFIG_CRL_CHECK)" value="8" />
            <map message="$(string.WFSettingType_ValueMap.FW_GLOBAL_CONFIG_IPSEC_THROUGH_NAT)" value="9" />
            <map message="$(string.WFSettingType_ValueMap.FW_GLOBAL_CONFIG_POLICY_VERSION)" value="10" />
            <map message="$(string.WFSettingType_ValueMap.FW_GLOBAL_CONFIG_BINARY_VERSION_SUPPORTED)" value="11" />
            <map message="$(string.WFSettingType_ValueMap.FW_GLOBAL_CONFIG_IPSEC_TUNNEL_REMOTE_MACHINE_AUTHORIZATION_LIST)" value="12" />
            <map message="$(string.WFSettingType_ValueMap.FW_GLOBAL_CONFIG_IPSEC_TUNNEL_REMOTE_USER_AUTHORIZATION_LIST)" value="13" />
          </valueMap>
          <valueMap name="WFOrigin_ValueMap">
            <map message="$(string.WFOrigin_ValueMap.FW_RULE_ORIGIN_LOCAL)" value="1" />
            <map message="$(string.WFOrigin_ValueMap.FW_RULE_ORIGIN_GP)" value="2" />
            <map message="$(string.WFOrigin_ValueMap.FW_RULE_ORIGIN_DYNAMIC)" value="3" />
            <map message="$(string.WFOrigin_ValueMap.FW_RULE_ORIGIN_AUTOGEN)" value="4" />
            <map message="$(string.WFOrigin_ValueMap.FW_RULE_ORIGIN_HARDCODED)" value="5" />
          </valueMap>
          <valueMap name="WFAllowBlock_ValueMap">
            <map message="$(string.WFAllowBlock_ValueMap.Allow)" value="0" />
            <map message="$(string.WFAllowBlock_ValueMap.Block)" value="1" />
          </valueMap>
          <valueMap name="YesNo_ValueMap">
            <map message="$(string.YesNo_ValueMap.Yes)" value="1" />
            <map message="$(string.YesNo_ValueMap.No)" value="0" />
          </valueMap>
          <valueMap name="WFStoreType_ValueMap">
            <map message="$(string.WFStoreType_ValueMap.FW_STORE_TYPE_GP_RSOP)" value="1" />
            <map message="$(string.WFStoreType_ValueMap.FW_STORE_TYPE_LOCAL)" value="2" />
            <map message="$(string.WFStoreType_ValueMap.FW_STORE_TYPE_WSH_STATIC)" value="3" />
            <map message="$(string.WFStoreType_ValueMap.FW_STORE_TYPE_WSH_CONFIGURABLE)" value="4" />
            <map message="$(string.WFStoreType_ValueMap.FW_STORE_TYPE_DYNAMIC)" value="5" />
            <map message="$(string.WFStoreType_ValueMap.FW_STORE_TYPE_GPO)" value="6" />
          </valueMap>
          <valueMap name="Enabled_Disabled_ValueMap">
            <map message="$(string.Enabled_Disabled_ValueMap.Enabled)" value="1" />
            <map message="$(string.Enabled_Disabled_ValueMap.Disabled)" value="0" />
          </valueMap>
          <valueMap name="Enabled_Disabled_Inv_ValueMap">
            <map message="$(string.Enabled_Disabled_ValueMap.Enabled)" value="0" />
            <map message="$(string.Enabled_Disabled_ValueMap.Disabled)" value="1" />
          </valueMap>
          <valueMap name="EdgeTraversal_ValueMap">
            <map message="$(string.EdgeTraversal_ValueMap.FW_EDGE_TRAVERSAL_NONE)" value="0" />
            <map message="$(string.EdgeTraversal_ValueMap.FW_ALLOW_EDGE_TRAVERAL)" value="1" />
            <map message="$(string.EdgeTraversal_ValueMap.FW_ALLOW_EDGE_TRAVERAL_DEFER_APP)" value="2" />
            <map message="$(string.EdgeTraversal_ValueMap.FW_ALLOW_EDGE_TRAVERAL_DEFER_USER)" value="3" />
          </valueMap>
          <valueMap name="SecurityOptions_ValueMap">
            <map message="$(string.SecurityOptions_ValueMap.FW_SECURITY_NONE)" value="0" />
            <map message="$(string.SecurityOptions_ValueMap.FW_SECURITY_AUTHENTICATE)" value="1" />
            <map message="$(string.SecurityOptions_ValueMap.FW_SECURITY_AUTHENTICATE_ENCRYPT)" value="2" />
            <map message="$(string.SecurityOptions_ValueMap.FW_SECURITY_AUTHENTICATE_NEGO_ENCRYPTION)" value="3" />
            <map message="$(string.SecurityOptions_ValueMap.FW_SECURITY_AUTHENTICATE_NO_ENCAP)" value="4" />
          </valueMap>
          <valueMap name="IPSecThroughNAT_ValueMap">
            <map message="$(string.IPSecThroughNAT_ValueMap.NAT_NEVER)" value="0" />
            <map message="$(string.IPSecThroughNAT_ValueMap.NAT_SERVER_BEHIND_NAT)" value="1" />
            <map message="$(string.IPSecThroughNAT_ValueMap.NAT_SERVER_AND_CLIENT_BEHIND_NAT)" value="2" />
          </valueMap>
          <valueMap name="WFDir_ValueMap">
            <map message="$(string.WFDir_ValueMap.FW_DIR_IN)" value="1" />
            <map message="$(string.WFDir_ValueMap.FW_DIR_OUT)" value="2" />
          </valueMap>
          <valueMap name="WFAction_ValueMap">
            <map message="$(string.WFAction_ValueMap.FW_RULE_ACTION_ALLOW_BYPASS)" value="1" />
            <map message="$(string.WFAction_ValueMap.FW_RULE_ACTION_BLOCK)" value="2" />
            <map message="$(string.WFAction_ValueMap.FW_RULE_ACTION_ALLOW)" value="3" />
          </valueMap>
          <valueMap name="WFProfileType_ValueMap">
            <map message="$(string.WFProfileType_ValueMap.None)" value="0x80000001" />
            <map message="$(string.WFProfileType_ValueMap.Private)" value="2" />
            <map message="$(string.WFProfileType_ValueMap.Public)" value="4" />
            <map message="$(string.WFProfileType_ValueMap.Domain)" value="1" />
            <map message="$(string.WFProfileType_ValueMap.PrivateDomain)" value="3" />
            <map message="$(string.WFProfileType_ValueMap.PublicDomain)" value="5" />
            <map message="$(string.WFProfileType_ValueMap.PublicPrivate)" value="6" />
            <map message="$(string.WFProfileType_ValueMap.PublicPrivateDomain)" value="7" />
            <map message="$(string.WFProfileType_ValueMap.PublicPrivateDomain)" value="0x7FFFFFFF" />
          </valueMap>
          <valueMap name="QU_NotShown_Reason_ValueMap">
            <map message="$(string.QU_NotShown_Reason_ValueMap.QU_NOT_SHOWN_REASON_SYSTEM_SERVICE)" value="1" />
            <map message="$(string.QU_NotShown_Reason_ValueMap.QU_NOT_SHOWN_REASON_NON_INTERACTIVE_APP)" value="2" />
            <map message="$(string.QU_NotShown_Reason_ValueMap.QU_NOT_SHOWN_REASON_FIREWALL_OFF)" value="4" />
            <map message="$(string.QU_NotShown_Reason_ValueMap.QU_NOT_SHOWN_REASON_BLOCK_LISTED_IMAGE)" value="8" />
            <map message="$(string.QU_NotShown_Reason_ValueMap.QU_NOT_SHOWN_REASON_INACTIVE_SESSION)" value="16" />
            <map message="$(string.QU_NotShown_Reason_ValueMap.QU_NOT_SHOWN_REASON_RUNTIME_ERROR)" value="32" />
            <map message="$(string.QU_NotShown_Reason_ValueMap.QU_NOT_SHOWN_REASON_INBOUND_NOTIFY_DISABLED)" value="64" />
            <map message="$(string.QU_NotShown_Reason_ValueMap.QU_NOT_SHOWN_REASON_BLOCK_INBOUND)" value="128" />
            <map message="$(string.QU_NotShown_Reason_ValueMap.QU_NOT_SHOWN_REASON_BLOCK_INBOUND_AND_INBOUND_NOTIFY_DISABLED)" value="192" />
          </valueMap>
          <valueMap name="IPVersion_ValueMap">
            <map message="$(string.IPVersion_ValueMap.IPv4)" value="0" />
            <map message="$(string.IPVersion_ValueMap.IPv6)" value="1" />
            <map message="$(string.IPVersion_ValueMap.Any)" value="2" />
          </valueMap>
          <valueMap name="Protocol_ValueMap">
            <map message="$(string.Protocol_ValueMap.TCP)" value="6" />
            <map message="$(string.Protocol_ValueMap.UDP)" value="17" />
            <map message="$(string.Protocol_ValueMap.ICMPV4)" value="1" />
            <map message="$(string.Protocol_ValueMap.ICMPV6)" value="58" />
            <map message="$(string.Protocol_ValueMap.Any)" value="256" />
          </valueMap>
          <valueMap name="WFCRL_ValueMap">
            <map message="$(string.WFCRL_ValueMap.Disabled)" value="0" />
            <map message="$(string.WFCRL_ValueMap.Check)" value="1" />
            <map message="$(string.WFCRL_ValueMap.Enforce)" value="2" />
          </valueMap>
          <valueMap name="WFPSK_ValueMap">
            <map message="$(string.WFPSK_ValueMap.None)" value="0" />
            <map message="$(string.WFPSK_ValueMap.UTF8)" value="1" />
          </valueMap>
          <valueMap name="WFIPSecExempt_ValueMap">
            <map message="$(string.WFIPSecExempt.None)" value="0" />
            <map message="$(string.WFIPSecExempt.ND)" value="1" />
            <map message="$(string.WFIPSecExempt.ICMP)" value="2" />
          </valueMap>
          <valueMap name="WFCSAction_ValueMap">
            <map message="$(string.WFCSAction_ValueMap.FW_CS_RULE_ACTION_SECURE_SERVER)" value="1" />
            <map message="$(string.WFCSAction_ValueMap.FW_CS_RULE_ACTION_BOUNDARY)" value="2" />
            <map message="$(string.WFCSAction_ValueMap.FW_CS_RULE_ACTION_SECURE)" value="3" />
            <map message="$(string.WFCSAction_ValueMap.FW_CS_RULE_ACTION_DO_NOT_SECURE)" value="4" />
          </valueMap>
          <valueMap name="WFPhase1CryptoSetFlag_ValueMap">
            <map message="$(string.WFPhase1CryptoSetFlag_ValueMap.FW_PHASE1_CRYPTO_FLAGS_NONE)" value="0" />
            <map message="$(string.WFPhase1CryptoSetFlag_ValueMap.FW_PHASE1_CRYPTO_FLAGS_DO_NOT_SKIP_DH)" value="1" />
          </valueMap>
          <valueMap name="WFPhase2CryptoSetPfs_ValueMap">
            <map message="$(string.WFPhase2CryptoSetPfs_ValueMap.FW_PHASE2_CRYPTO_PFS_INVALID)" value="0" />
            <map message="$(string.WFPhase2CryptoSetPfs_ValueMap.FW_PHASE2_CRYPTO_PFS_DISABLE)" value="1" />
            <map message="$(string.WFPhase2CryptoSetPfs_ValueMap.FW_PHASE2_CRYPTO_PFS_PHASE1)" value="2" />
            <map message="$(string.WFPhase2CryptoSetPfs_ValueMap.FW_PHASE2_CRYPTO_PFS_DH1)" value="3" />
            <map message="$(string.WFPhase2CryptoSetPfs_ValueMap.FW_PHASE2_CRYPTO_PFS_DH2)" value="4" />
            <map message="$(string.WFPhase2CryptoSetPfs_ValueMap.FW_PHASE2_CRYPTO_PFS_DH2048)" value="5" />
            <map message="$(string.WFPhase2CryptoSetPfs_ValueMap.FW_PHASE2_CRYPTO_PFS_ECDH256)" value="6" />
            <map message="$(string.WFPhase2CryptoSetPfs_ValueMap.FW_PHASE2_CRYPTO_PFS_ECDH384)" value="7" />
            <map message="$(string.WFPhase2CryptoSetPfs_ValueMap.FW_PHASE2_CRYPTO_PFS_DH24)" value="8" />
          </valueMap>
          <valueMap name="WFIPsecPhase_ValueMap">
            <map message="$(string.WFIPsecPhase_ValueMap.FW_IPSEC_PHASE_INVALID)" value="0" />
            <map message="$(string.WFIPsecPhase_ValueMap.FW_IPSEC_PHASE_1)" value="1" />
            <map message="$(string.WFIPsecPhase_ValueMap.FW_IPSEC_PHASE_2)" value="2" />
          </valueMap>
          <valueMap name="NetIsoHttpProxyChangeType_ValueMap">
            <map message="$(string.NetIsoHttpProxyChangeType_ValueMap.GP_Change)" value="0" />
            <map message="$(string.NetIsoHttpProxyChangeType_ValueMap.Network Change)" value="1" />
            <map message="$(string.NetIsoHttpProxyChangeType_ValueMap.Manual Change)" value="2" />
            <map message="$(string.NetIsoHttpProxyChangeType_ValueMap.Indication Change)" value="3" />
            <map message="$(string.NetIsoHttpProxyChangeType_ValueMap.Subscription Refresh)" value="4" />
          </valueMap>
          <valueMap name="NetIsoSubnetsChangeType_ValueMap">
            <map message="$(string.NetIsoSubnetsChangeType_ValueMap.GP Change)" value="0" />
            <map message="$(string.NetIsoSubnetsChangeType_ValueMap.AD Subnets Change)" value="1" />
            <map message="$(string.NetIsoSubnetsChangeType_ValueMap.Subscription Refresh)" value="2" />
          </valueMap>
          <valueMap name="NetIsoCapabilityChangeType_ValueMap">
            <map message="$(string.NetIsoCapabilityChangeType_ValueMap.Local Address Change)" value="0" />
            <map message="$(string.NetIsoCapabilityChangeType_ValueMap.Corp Subnets Change)" value="1" />
            <map message="$(string.NetIsoCapabilityChangeType_ValueMap.Http Proxies Change)" value="2" />
            <map message="$(string.NetIsoCapabilityChangeType_ValueMap.Network Profile Change)" value="3" />
          </valueMap>
          <valueMap name="NetIsoCapabilityType_ValueMap">
            <map message="$(string.NetIsoCapabilityType_ValueMap.Internet)" value="0" />
            <map message="$(string.NetIsoCapabilityType_ValueMap.PrivateNetwork)" value="1" />
            <map message="$(string.NetIsoCapabilityType_ValueMap.RemotePrivateNetwork)" value="2" />
            <map message="$(string.NetIsoCapabilityType_ValueMap.Proximity)" value="3" />
          </valueMap>
        </maps>
      </provider>
      <provider guid="{e595f735-b42a-494b-afcd-b68666945cd3}" message="$(string.FirewallProviderName)" messageFileName="%SystemRoot%\System32\mpssvc.dll" name="Microsoft-Windows-Firewall" resourceFileName="%SystemRoot%\System32\mpssvc.dll" symbol="WindowsFirewall">
        <channels>
          <importChannel chid="SystemChannel" name="System" />
        </channels>
        <events>
          <event channel="SystemChannel" level="win:Error" message="$(string.event_SYS_AUDITID_MPSFIREWALL_CALL_UNSUPPORTED)" opcode="win:Info" symbol="SYS_AUDITID_ETW_MPSFIREWALL_CALL_UNSUPPORTED" template="T_SYS_AUDITID_MPSFIREWALL_CALL_UNSUPPORTED" value="0x1900" />
        </events>
        <templates>
          <template tid="T_SYS_AUDITID_MPSFIREWALL_CALL_UNSUPPORTED">
            <data inType="win:UnicodeString" name="CallerProcessName" />
            <data inType="win:UInt32" name="ProcessId" />
            <data inType="win:UnicodeString" name="Publisher" />
          </template>
        </templates>
      </provider>
    </events>
  </instrumentation>
  <migration settingsVersion="0">
    <supportedComponents>
      <supportedComponent>
        <assemblyIdentity name="_" version="1.0.0.0" />
        <supportedComponentIdentity xmlns="urn:schemas-microsoft-com:asm.v3" language="neutral" name="Networking-MPSSVC-Svc" processorArchitecture="*" settingsVersionRange="0" />
        <machineSpecific xmlns="urn:schemas-microsoft-com:asm.v3">
          <migXml xmlns="">
            <rules context="System">
              <exclude>
                <objectSet>
                  <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\* [*]</pattern>
                  <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\Static\* [*]</pattern>
                </objectSet>
              </exclude>
              <merge script="MigXmlHelper.SourcePriority()">
                <objectSet>
                  <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\* [*]</pattern>
                </objectSet>
              </merge>
            </rules>
          </migXml>
        </machineSpecific>
      </supportedComponent>
      <supportedComponent>
        <assemblyIdentity name="_" version="1.0.0.0" />
        <supportedComponentIdentity xmlns="urn:schemas-microsoft-com:asm.v3" language="*" name="Networking-MPSSVC-Svc-DL" processorArchitecture="*" settingsVersionRange="0" />
        <machineSpecific xmlns="urn:schemas-microsoft-com:asm.v3">
          <migXml xmlns="">
            <rules context="System">
              <merge script="MigXmlHelper.SourcePriority()">
                <objectSet>
                  <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\* [*]</pattern>
                  <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\* [*]</pattern>
                  <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\* [*]</pattern>
                </objectSet>
              </merge>
            </rules>
          </migXml>
        </machineSpecific>
      </supportedComponent>
    </supportedComponents>
    <machineSpecific xmlns="urn:schemas-microsoft-com:asm.v3">
      <migXml xmlns="">
        <plugin classId="{2f593f80-46a4-4da9-aad8-83a71d1f4333}" file="%windir%\system32\icfupgd.dll" />
        <rules context="System">
          <exclude>
            <objectSet>
              <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\* [*]</pattern>
              <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\RestrictedServices\Static\* [*]</pattern>
            </objectSet>
          </exclude>
          <include>
            <objectSet>
              <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\* [*]</pattern>
            </objectSet>
          </include>
          <merge script="MigXmlHelper.SourcePriority()">
            <objectSet>
              <pattern type="Registry">HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\* [*]</pattern>
            </objectSet>
          </merge>
        </rules>
      </migXml>
    </machineSpecific>
  </migration>
  <configuration xmlns="urn:schemas-microsoft-com:asm.v3" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
    <configurationSchema>
      <xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns="Networking-MPSSVC-Svc" targetNamespace="Networking-MPSSVC-Svc">
        <xsd:element default="false" name="DomainProfile_DisableNotifications" type="xsd:boolean" wcm:description="DomainProfile_DisableNotifications disables Windows® Firewall notifications for the domain profile." wcm:displayName="DomainProfile Disable Notifications" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile')" wcm:legacyName="DisableNotifications" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:passes="specialize" wcm:scope="allUsers" wcm:visible="true" />
        <xsd:element default="false" name="PrivateProfile_DisableNotifications" type="xsd:boolean" wcm:description="PrivateProfile_DisableNotifications disables Windows Firewall notifications for the private profile." wcm:displayName="PrivateProfile Disable Notifications" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile')" wcm:legacyName="DisableNotifications" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:passes="specialize" wcm:scope="allUsers" wcm:visible="true" />
        <xsd:element default="false" name="PublicProfile_DisableNotifications" type="xsd:boolean" wcm:description="PublicProfile_DisableNotifications disables Windows Firewall notfications for the public profile." wcm:displayName="PublicProfile Disable Notifications" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile')" wcm:legacyName="DisableNotifications" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:passes="specialize" wcm:scope="allUsers" wcm:visible="true" />
        <xsd:element default="false" name="DomainProfile_DisableNotifications_Default" type="xsd:boolean" wcm:displayName="DomainProfile Disable Notifications Default - Don't change" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy\DomainProfile')" wcm:legacyName="DisableNotifications" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:scope="allUsers" wcm:visible="false" />
        <xsd:element default="false" name="PrivateProfile_DisableNotifications_Default" type="xsd:boolean" wcm:displayName="PrivateProfile Disable Notifications Default - Don't change" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy\StandardProfile')" wcm:legacyName="DisableNotifications" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:scope="allUsers" wcm:visible="false" />
        <xsd:element default="false" name="PublicProfile_DisableNotifications_Default" type="xsd:boolean" wcm:displayName="PublicProfile Disable Notifications Default - Don't change" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy\PublicProfile')" wcm:legacyName="DisableNotifications" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:scope="allUsers" wcm:visible="false" />
        <xsd:element default="true" name="DomainProfile_EnableFirewall" type="xsd:boolean" wcm:description="DomainProfile_EnableFirewall enables Windows® Firewall for the domain profile." wcm:displayName="DomainProfile Enable Firewall" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile')" wcm:legacyName="EnableFirewall" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:passes="specialize" wcm:scope="allUsers" wcm:visible="true" />
        <xsd:element default="true" name="PrivateProfile_EnableFirewall" type="xsd:boolean" wcm:description="PrivateProfile_EnableFirewall enables Windows Firewall for the private profile." wcm:displayName="PrivateProfile Enable Firewall" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile')" wcm:legacyName="EnableFirewall" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:passes="specialize" wcm:scope="allUsers" wcm:visible="true" />
        <xsd:element default="true" name="PublicProfile_EnableFirewall" type="xsd:boolean" wcm:description="PublicProfile_EnableFirewall enables Windows Firewall for the public profile." wcm:displayName="PublicProfile Enable Firewall" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile')" wcm:legacyName="EnableFirewall" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:passes="specialize" wcm:scope="allUsers" wcm:visible="true" />
        <xsd:element default="true" name="DomainProfile_EnableFirewall_Default" type="xsd:boolean" wcm:displayName="DomainProfile Enable Firewall Default - Don't change" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy\DomainProfile')" wcm:legacyName="EnableFirewall" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:scope="allUsers" wcm:visible="false" />
        <xsd:element default="true" name="PrivateProfile_EnableFirewall_Default" type="xsd:boolean" wcm:displayName="PrivateProfile Enable Firewall Default - Don't change" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy\StandardProfile')" wcm:legacyName="EnableFirewall" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:scope="allUsers" wcm:visible="false" />
        <xsd:element default="true" name="PublicProfile_EnableFirewall_Default" type="xsd:boolean" wcm:displayName="PublicProfile Enable Firewall Default - Don't change" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy\PublicProfile')" wcm:legacyName="EnableFirewall" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:scope="allUsers" wcm:visible="false" />
        <xsd:element default="false" name="DisableStatefulFTP" type="xsd:boolean" wcm:displayName="Disable Stateful FTP" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy')" wcm:legacyName="DisableStatefulFTP" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:passes="specialize" wcm:scope="allUsers" wcm:visible="true" />
        <xsd:element default="false" name="DisableStatefulPPTP" type="xsd:boolean" wcm:displayName="Disable Stateful PPTP" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy')" wcm:legacyName="DisableStatefulPPTP" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:passes="specialize" wcm:scope="allUsers" wcm:visible="true" />
        <xsd:element default="false" name="DisableStatefulFTP_Default" type="xsd:boolean" wcm:displayName="Disable Stateful FTP Default - Don't change" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy')" wcm:legacyName="DisableStatefulFTP" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:scope="allUsers" wcm:visible="false" />
        <xsd:element default="false" name="DisableStatefulPPTP_Default" type="xsd:boolean" wcm:displayName="Disable Stateful PPTP Default - Don't change" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy')" wcm:legacyName="DisableStatefulPPTP" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:scope="allUsers" wcm:visible="false" />
        <xsd:element default="%systemroot%\system32\LogFiles\Firewall\pfirewall.log" name="DomainProfile_LogFile" type="xsd:string" wcm:dataOnly="true" wcm:description="DomainProfile_LogFile specifies the default log file for Windows® Firewall for the domain profile." wcm:displayName="DomainProfile LogFile" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging')" wcm:legacyName="LogFilePath" wcm:legacyType="REG_EXPAND_SZ" wcm:migrate="yes" wcm:passes="specialize" wcm:scope="allUsers" wcm:visible="true" />
        <xsd:element default="%systemroot%\system32\LogFiles\Firewall\pfirewall.log" name="PrivateProfile_LogFile" type="xsd:string" wcm:dataOnly="true" wcm:description="PrivateProfile_LogFile specifies the default log file for Windows Firewall for the private profile." wcm:displayName="PrivateProfile LogFile" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging')" wcm:legacyName="LogFilePath" wcm:legacyType="REG_EXPAND_SZ" wcm:migrate="yes" wcm:passes="specialize" wcm:scope="allUsers" wcm:visible="true" />
        <xsd:element default="%systemroot%\system32\LogFiles\Firewall\pfirewall.log" name="PublicProfile_LogFile" type="xsd:string" wcm:dataOnly="true" wcm:description="PublicProfile_LogFile specifies the default log file for Windows Firewall for the public profile." wcm:displayName="PublicProfile LogFile" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging')" wcm:legacyName="LogFilePath" wcm:legacyType="REG_EXPAND_SZ" wcm:migrate="yes" wcm:passes="specialize" wcm:scope="allUsers" wcm:visible="true" />
        <xsd:element default="%systemroot%\system32\LogFiles\Firewall\pfirewall.log" name="DomainProfile_LogFile_Default" type="xsd:string" wcm:dataOnly="true" wcm:description="Set the default log file for the Windows Firewall" wcm:displayName="DomainProfile LogFile Default - Don't change" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy\DomainProfile\Logging')" wcm:legacyName="LogFilePath" wcm:legacyType="REG_EXPAND_SZ" wcm:migrate="yes" wcm:scope="allUsers" wcm:visible="false" />
        <xsd:element default="%systemroot%\system32\LogFiles\Firewall\pfirewall.log" name="PrivateProfile_LogFile_Default" type="xsd:string" wcm:dataOnly="true" wcm:description="Set the default log file for the Windows Firewall" wcm:displayName="PrivateProfile LogFile Default - Don't change" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy\StandardProfile\Logging')" wcm:legacyName="LogFilePath" wcm:legacyType="REG_EXPAND_SZ" wcm:migrate="yes" wcm:scope="allUsers" wcm:visible="false" />
        <xsd:element default="%systemroot%\system32\LogFiles\Firewall\pfirewall.log" name="PublicProfile_LogFile_Default" type="xsd:string" wcm:dataOnly="true" wcm:description="Set the default log file for the Windows Firewall" wcm:displayName="PublicProfile LogFile Default - Don't change" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy\PublicProfile\Logging')" wcm:legacyName="LogFilePath" wcm:legacyType="REG_EXPAND_SZ" wcm:migrate="yes" wcm:scope="allUsers" wcm:visible="false" />
        <xsd:element default="4096" name="DomainProfile_LogFileSize" type="xsd:unsignedInt" wcm:dataOnly="true" wcm:description="DomainProfile_LogFileSize specifies the size of the default log file for Windows® Firewall for the domain profile." wcm:displayName="DomainProfile LogFileSize" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging')" wcm:legacyName="LogFileSize" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:passes="specialize" wcm:scope="allUsers" wcm:visible="true" />
        <xsd:element default="4096" name="PrivateProfile_LogFileSize" type="xsd:unsignedInt" wcm:dataOnly="true" wcm:description="PrivateProfile_LogFileSize specifies the size of the default log file for Windows Firewall for the private profile." wcm:displayName="PrivateProfile LogFileSize" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging')" wcm:legacyName="LogFileSize" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:passes="specialize" wcm:scope="allUsers" wcm:visible="true" />
        <xsd:element default="4096" name="PublicProfile_LogFileSize" type="xsd:unsignedInt" wcm:dataOnly="true" wcm:description="PublicProfile_LogFileSize specifies the size of the default log file for Windows Firewall for the public profile." wcm:displayName="PublicProfile LogFileSize" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging')" wcm:legacyName="LogFileSize" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:passes="specialize" wcm:scope="allUsers" wcm:visible="true" />
        <xsd:element default="4096" name="DomainProfile_LogFileSize_Default" type="xsd:unsignedInt" wcm:dataOnly="true" wcm:description="Set the default log file size for the Windows Firewall" wcm:displayName="DomainProfile LogFileSize Default - Don't change" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy\DomainProfile\Logging')" wcm:legacyName="LogFileSize" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:scope="allUsers" wcm:visible="false" />
        <xsd:element default="4096" name="PrivateProfile_LogFileSize_Default" type="xsd:unsignedInt" wcm:dataOnly="true" wcm:description="Set the default log file size for the Windows Firewall" wcm:displayName="PrivateProfile LogFileSize Default - Don't change" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy\StandardProfile\Logging')" wcm:legacyName="LogFileSize" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:scope="allUsers" wcm:visible="false" />
        <xsd:element default="4096" name="PublicProfile_LogFileSize_Default" type="xsd:unsignedInt" wcm:dataOnly="true" wcm:description="Set the default log file size for the Windows Firewall" wcm:displayName="PublicProfile LogFileSize Default - Don't change" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy\PublicProfile\Logging')" wcm:legacyName="LogFileSize" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:scope="allUsers" wcm:visible="false" />
        <xsd:element default="false" name="DomainProfile_LogDroppedPackets" type="xsd:boolean" wcm:dataOnly="true" wcm:description="DomainProfile_LogDroppedPackets specifies whether dropped packets are logged for Windows® Firewall for the domain profile." wcm:displayName="DomainProfile LogDroppedPackets" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging')" wcm:legacyName="LogDroppedPackets" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:passes="specialize" wcm:scope="allUsers" wcm:visible="true" />
        <xsd:element default="false" name="PrivateProfile_LogDroppedPackets" type="xsd:boolean" wcm:dataOnly="true" wcm:description="PrivateProfile_LogDroppedPackets specifies whether dropped packets are logged for Windows Firewall for the private profile." wcm:displayName="PrivateProfile LogDroppedPackets" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging')" wcm:legacyName="LogDroppedPackets" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:passes="specialize" wcm:scope="allUsers" wcm:visible="true" />
        <xsd:element default="false" name="PublicProfile_LogDroppedPackets" type="xsd:boolean" wcm:dataOnly="true" wcm:description="PublicProfile_LogDroppedPackets specifies whether dropped packets are logged for Windows Firewall for the public profile." wcm:displayName="PublicProfile LogDroppedPackets" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging')" wcm:legacyName="LogDroppedPackets" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:passes="specialize" wcm:scope="allUsers" wcm:visible="true" />
        <xsd:element default="false" name="DomainProfile_LogSuccessfulConnections" type="xsd:boolean" wcm:dataOnly="true" wcm:description="DomainProfile_LogSuccessfulConnections specifies whether to log successful connections for Windows® Firewall for the domain profile." wcm:displayName="DomainProfile LogSuccessfulConnections" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\Logging')" wcm:legacyName="LogSuccessfulConnections" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:passes="specialize" wcm:scope="allUsers" wcm:visible="true" />
        <xsd:element default="false" name="PrivateProfile_LogSuccessfulConnections" type="xsd:boolean" wcm:dataOnly="true" wcm:description="PrivateProfile_LogSuccessfulConnections specifies whether successful connections are logged for Windows Firewall for the private profile." wcm:displayName="PrivateProfile LogSuccessfulConnections" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\Logging')" wcm:legacyName="LogSuccessfulConnections" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:passes="specialize" wcm:scope="allUsers" wcm:visible="true" />
        <xsd:element default="false" name="PublicProfile_LogSuccessfulConnections" type="xsd:boolean" wcm:dataOnly="true" wcm:description="PublicProfile_LogSuccessfulConnections specifies whether to log successful connections for Windows Firewall for the public profile." wcm:displayName="PublicProfile LogSuccessfulConnections" wcm:handler="regkey('HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile\Logging')" wcm:legacyName="LogSuccessfulConnections" wcm:legacyType="REG_DWORD" wcm:migrate="yes" wcm:passes="specialize" wcm:scope="allUsers" wcm:visible="true" />
        <xsd:complexType name="FirewallRuleType">
          <xsd:sequence>
            <xsd:element default="???" name="InternalName" type="xsd:string" wcm:description="Firewall rule unique name." wcm:visible="false" />
            <xsd:element default="" name="Name" type="xsd:string" wcm:description="Firewall rule friendly name." wcm:visible="false" />
            <xsd:element default="" name="Desc" type="xsd:string" wcm:description="Firewall rule description." wcm:visible="false" />
            <xsd:element default="domain" name="Profile" type="xsd:string" wcm:description="Firewall rule profile (Domain, Standard, Public)." wcm:visible="false" />
            <xsd:element default="block" name="Action" type="xsd:string" wcm:description="Firewall rule action (Block, Allow)." wcm:visible="false" />
            <xsd:element default="false" name="Active" type="xsd:string" wcm:description="Firewall rule active state (True, False)." wcm:visible="false" />
            <xsd:element default="in" name="Dir" type="xsd:string" wcm:description="Firewall rule direction (In, Out, Both)." wcm:visible="false" />
            <xsd:element default="" name="Protocol" type="xsd:string" wcm:description="Firewall rule protocol (TCP, UDP, ICMP4, ICMP6, N)." wcm:visible="false" />
            <xsd:element default="" name="ICMP4" type="xsd:string" wcm:description="Firewall Rule ICMP4 type:code." wcm:visible="false" />
            <xsd:element default="" name="ICMP6" type="xsd:string" wcm:description="Firewall rule ICMP6 type:code." wcm:visible="false" />
            <xsd:element default="" name="Port" type="xsd:string" wcm:description="Firewall rule port (direction independent)." wcm:visible="false" />
            <xsd:element default="" name="LPort" type="xsd:string" wcm:description="Firewall rule local port." wcm:visible="false" />
            <xsd:element default="" name="RPort" type="xsd:string" wcm:description="Firewall rule remote port." wcm:visible="false" />
            <xsd:element default="" name="Binary" type="xsd:string" wcm:description="Firewall rule binary fully-quallified file name." wcm:visible="false" />
            <xsd:element default="" name="Svc" type="xsd:string" wcm:description="Firewall rule service name." wcm:visible="false" />
            <xsd:element default="" name="Scope" type="xsd:string" wcm:description="Firewall rule scope." wcm:visible="false" />
            <xsd:element default="" name="la4" type="xsd:string" wcm:description="Firewall rule IPv4 local addresses." wcm:visible="false" />
            <xsd:element default="" name="la6" type="xsd:string" wcm:description="Firewall rule IPv6 local addresses." wcm:visible="false" />
            <xsd:element default="" name="ra4" type="xsd:string" wcm:description="Firewall rule IPv4 remote addresses." wcm:visible="false" />
            <xsd:element default="" name="ra6" type="xsd:string" wcm:description="Firewall rule IPv6 remote addresses." wcm:visible="false" />
            <xsd:element default="" name="group" type="xsd:string" wcm:description="Firewall rule group name." wcm:visible="false" />
            <xsd:element default="false" name="edge" type="xsd:string" wcm:description="Firewall edge traversal setting (True, False)." wcm:visible="false" />
            <xsd:element default="false" name="lsm" type="xsd:string" wcm:description="Loose source mapping setting (True, False)." wcm:visible="false" />
            <xsd:element default="false" name="lom" type="xsd:string" wcm:description="Local only mapping setting (True, False)." wcm:visible="false" />
          </xsd:sequence>
        </xsd:complexType>
        <xsd:simpleType name="ProfileType">
          <xsd:restriction base="xsd:string">
            <xsd:enumeration value="domain" />
            <xsd:enumeration value="private" />
            <xsd:enumeration value="public" />
            <xsd:enumeration value="all" />
          </xsd:restriction>
        </xsd:simpleType>
        <xsd:complexType name="FirewallGroupType">
          <xsd:sequence>
            <xsd:element default="" name="Group" type="xsd:string" wcm:description="Firewall rule group name." />
            <xsd:element default="domain" name="Profile" type="ProfileType" wcm:description="Firewall rule group profile." />
            <xsd:element default="false" name="Active" type="xsd:boolean" wcm:description="Firewall rule group active state (True, False)." />
          </xsd:sequence>
        </xsd:complexType>
        <xsd:complexType name="FirewallGroupListType">
          <xsd:sequence>
            <xsd:element maxOccurs="unbounded" minOccurs="0" name="FirewallGroup" type="FirewallGroupType" />
          </xsd:sequence>
        </xsd:complexType>
        <xsd:element name="FirewallGroups" type="FirewallGroupListType" wcm:dataOnly="false" wcm:description="FirewallGroups specifies Windows® Firewall groups." wcm:displayName="Firewall Groups" wcm:handler="regkey('HKLM\Software\Microsoft\Windows NT\CurrentVersion\UnattendSettings\FirewallRules')" wcm:passes="specialize" wcm:scope="allUsers" wcm:visible="true" />
      </xsd:schema>
    </configurationSchema>
    <metadata />
  </configuration>
  <unattendActions xmlns="urn:schemas-microsoft-com:asm.v3">
    <unattendAction arguments="cmifw.dll,unattend" executableName="$(runtime.system32)\rundll32.exe" passes="specialize" />
  </unattendActions>
</assembly>