<div class="content"><p> </p><p>The RRPC_FWSetConnectionSecurityRule method requests the
server to modify the specified connection security rule in the policy contained
in the policy store that is referenced by the handle specified in the <i>hPolicy</i>
parameter.</p><dl>
<dd>
<div><pre> ULONG RRPC_FWSetConnectionSecurityRule(
   [in] FW_CONN_HANDLE rpcConnHandle,
   [in] FW_POLICY_STORE_HANDLE hPolicy,
   [in] PFW_CS_RULE2_0 pRule
 );
</pre></div>
</dd></dl><p><b>rpcConnHandle: </b>This parameter is an <span><a href="d891304d-92d8-4f9f-9e60-a1f02b28ae30#gt_8a7f6700-8311-45bc-af10-82e10accd331" data-linktype="relative-path">RPC</a></span>
binding handle that connects to the RPC interface of the Firewall and Advanced
Security Protocol.</p><p><b>hPolicy: </b>This input parameter is an <span><a href="88f6ea4a-a946-4747-bb93-f142f1760752" data-linktype="relative-path">FW_POLICY_STORE_HANDLE</a></span>
data type. The data type MUST contain an opened policy store handle that is
successfully opened by using the RRPC_FWOpenPolicyStore (Opnum 0) method. The
handle MUST have read/write access rights.</p><p><b>pRule: </b>This parameter represents the
connection security rule that the client wants to modify in the store. The rule
MUST be a valid rule, as specified in the definition of the <span><a href="18277e4c-628d-4423-9fe3-ba98601ba50d" data-linktype="relative-path">FW_CS_RULE2_0</a></span>
data type.</p><p><b>Return Values: </b>The method returns 0 if
successful; if it fails, it returns a nonzero error code. The field can take
any specific error code value, as specified in <span><a href="../ms-erref/1bc92ddf-b79e-413c-bbaa-99a5281a6c90" data-linktype="relative-path">[MS-ERREF]</a></span>.
The following return values are common.</p><dl>
<dd>
<table><thead>
  <tr>
   <th>
   <p>Return value/code</p>
   </th>
   <th>
   <p>Description</p>
   </th>
  </tr>
 </thead><tbody><tr>
  <td>
  <p>0x00000032</p>
  <p>ERROR_NOT_SUPPORTED</p>
  </td>
  <td>
  <p>The specified store does not support this method; the
  store might be read-only.</p>
  </td>
 </tr><tr>
  <td>
  <p>0x00000005</p>
  <p>ERROR_ACCESS_DENIED</p>
  </td>
  <td>
  <p>The <i>hPolicy</i> handle was not opened with
  read/write access rights. This error is also returned if the client does not
  have the required credentials to call the method.</p>
  </td>
 </tr><tr>
  <td>
  <p>0x00000002</p>
  <p>ERROR_FILE_NOT_FOUND</p>
  </td>
  <td>
  <p>The specified rule that is referenced by the <i>wszRuleID</i>
  member string of the <span><a href="0d064110-5f2e-4b68-aa63-032c6cd5e4c6" data-linktype="relative-path">FW_CS_RULE</a></span> data
  type is not found in the policy store.</p>
  </td>
 </tr><tr>
  <td>
  <p>0x00000057</p>
  <p>ERROR_INVALID_PARAMETER</p>
  </td>
  <td>
  <p>A parameter of this method is incorrect, or is
  required and not specified. This error can be returned because:</p>
  <ul><li><p><span><span>  
  </span></span><span>The <i>pRule</i> object did not
  pass the connection security rule validations that are specified in the
  definition of the FW_CS_RULE data type.</span></p>
  </li><li><p><span><span>  
  </span></span><span>The rule has a phase 2 crypto set
  that specified FW_CRYPTO_PRPTOCOL_AUTH_NO_ENCAP (see section <span><a href="d97bac36-03e8-4215-9984-f2fbddd66be0" data-linktype="relative-path">2.2.69</a></span>),
  and either it is a tunnel mode rule or it has an AuthSet that specifies a
  preshared key auth method.</span></p>
  </li><li><p><span><span>  
  </span></span><span>A required value is not
  specified.</span></p>
  </li></ul></td>
 </tr></tbody></table>
</dd></dl><p><b>Exceptions Thrown:</b> No exceptions are thrown
except those that are thrown by the underlying RPC protocol, as specified in <span><a href="../ms-rpce/290c38b1-92fe-4229-91e6-4fc376610c15" data-linktype="relative-path">[MS-RPCE]</a></span>.
If any lower-layer errors are reported by RPC exception, this exception is
converted to an error code and reported to higher-layer protocols via the
return value.</p><p>This method modifies a connection security rule already
stored in the connection security linked list of the memory representation of
the store being modified. It uses this list to determine whether the rule
exists. It also writes through and saves the rule in disk. If called on an
online store, the connection security rule modifications are also enforced.</p><p>The server MUST validate that the client is authorized to
perform the requested operation (as defined in section <span><a href="b0c93352-8371-4d63-abca-b0cc8dbcc3d7" data-linktype="relative-path">3.1.4</a></span>)
before executing this method.</p></div>