How to Block or Allow an App through Windows Firewall

When launching an application that requires internet access for the first time, Windows Defender Firewall may prompt you with a security alert. This is the most straightforward method to grant an app access to your network.

• Tick Appropriate Network Types and Allow Access
   
  Select either “Private networks” or “Public networks” based on your needs and click “Allow access“. This action enables the application to communicate through the firewall on the selected network types.
   

  

If you missed the initial security alert or need to adjust the firewall settings for an application, you can manually add it to the allowed list through the Control Panel.

1. Open Control Panel
    
   Click on the search icon on your taskbar, type “Control Panel“, and open the top result to access the Control Panel interface.
    

   

2. Type “Windows Firewall” in the Control Panel search and choose “Windows Defender Firewall” in the main list
    
   

   

3. Click “Allow an app or feature through Windows Defender Firewall”
    
   This option will be in the sidebar on the left.
    

   

4. Press “Change Settings” in the “Allowed Apps” Window
    
   Allowing a program in Firewall requires you to provide administrator access.
    

   

5. Press “Allow another app…” at the Bottom of the Window
    
   

   

6. Next to the “Path” box, press “Browse…”
    
   

   

7. Browse to your applications .exe-file, click it, and press “Open”
    
   

   

8. Click the “Network types…” button in the bottom-left
    
   

   

9. Tick “Private” and/or “Public” networks and press “OK”
    
   

   

10. Press “Add” to allow the app through Firewall
     
    

    

11. Find the program in your “Allowed apps” list and make sure it’s ticked
     
    Press “OK” when you’re done to close the window.
     

    

If you decide that an application no longer requires access through the firewall, you can easily remove it from the allowed list.

1. Open Control Panel
    
   Repeat the steps to open the Control Panel and navigate to Windows Defender Firewall as described in the previous section.
    

   

2. Search Control Panel for Windows Firewall and select it from the list
    
   
   
3. Open Allowed Apps Settings
    
   Click on “Allow an app or feature through Windows Defender Firewall“.
    
   
4. Click “Change settings”
    
   This opens the list of allowed applications.
    

   

5. Remove the Application
    
   Locate the program you wish to remove, select it, and press “Remove“. Confirm your action if prompted, effectively revoking the application’s access through the firewall.
    

   

6. Press “Yes” to the prompt
    
   The app then is no longer allowed through your firewall. Doing this will not automatically block internet access to a program, but will modify how it interacts with the outside world. Depending on its function, this may stop it from working properly.
    

   

7. Press “OK” in the “Allowed Apps” Window
    
   

   

If you prefer the command-line interface, you can easily modify Windows Firewall rules through the Command Prompt. This method is often quicker than navigating through multiple settings menus, especially if you’re familiar with the commands needed. Follow these steps to learn how to allow or block a program from accessing the internet:

1. Open Command Prompt as an admin
    
   Press the search icon on your taskbar and type “Command Prompt“, then right-click on it and select “Run as administrator“. This will grant you the necessary permissions to alter Windows Firewall rules.
    
   
2. Use the netsh command to allow a program through Windows Firewall in Command Prompt
    
   Here is an example of what you’d type to allow an app through the Firewall in Windows 11 or Windows 10:
    

   netsh advfirewall firewall add rule name="Firefox" dir=in action=allow program="C:/Program Files/Mozilla Firefox/firefox.exe" enable=yes

    
   Make sure to replace “Firefox” and the file path within quotation marks with the name and path of the program you wish to allow. Successfully executing this command should resolve any “security or firewall settings might be blocking the connection” errors.
    
   

3. Use netsh to block a program in Windows Firewall
    
   To block an application, simply change “action=allow” to “action=block” in the command. Here’s the full command for blocking a program:
    

   netsh advfirewall firewall add rule name="Firefox" dir=in action=block program="C:/Program Files/Mozilla Firefox/firefox.exe" enable=yes

    
   As before, modify “Firefox” and the application’s file path in the quotation marks to match the program you’re intending to block. This action will prevent the program from accessing the internet.
    
   

You can also use Command Prompt to remove apps that you’ve previously allowed in your Firewall. Here is how:

1. Open Command Prompt as an administrator
    
   Press the search icon on your taskbar and type “Command Prompt“, then right-click the top result and choose “Run as administrator“.
    
   
2. Run the show rule command to export a list of your firewall entries
    
   To do so, simply paste the following into your Command Prompt and press Enter:
    
   netsh advfirewall firewall show rule name=all >"%UserProfile%/Desktop/WindowsFirewallRules.text"
    
   
3. Open the “WindowsFirewallRules.txt” file on your desktop and find your application
    
   You’ll see the name of the rule you created next to the “Rule Name” field. If you’re struggling to find your rule, you can press Ctrl + F to search.
    
   
4. Use the netsh command to delete the firewall rule
    
   Once you know the name of your firewall rule you can delete it by running the following command:
    
   netsh advfirewall Delete rule name="yourfirewallrule"
    
   Naturally, you should replace “yourfirewallrule” with the name of your rule. After you receive the “Deleted x rule(s)” confirmation, you can close Command Prompt.
    
   

If you want to allow or block a program in Firewall using Microsoft’s PowerShell tool, you can do so with the NetFirewallRule command. Here’s the procedure:

1. Open Windows PowerShell as an admin
    
   Access Windows PowerShell with administrator privileges by opening the hidden Start menu using “Windows + X” and then selecting “Windows PowerShell (Admin)”.
    
   
2. Use NetFirewallRule to allow a program through the Firewall
    
   To allow an application through the Firewall, execute the following command:
    

   New-NetFirewallRule -DisplayName "firewallrulename" -Direction Inbound -Program "C:/path/to/your/file.exe" -Action Allow

    
   Replace “firewallrulename” with a name for your rule and “C:/path/to/your/file.exe” with the path to the executable of your program. Press Enter to execute the command.

   

3. Use NetFirewallRule to block a program in Windows Firewall
    
   To block an application, utilize this command format:
    

   New-NetFirewallRule -DisplayName "firewallrulename" -Direction Inbound -Program "C:/path/to/your/file.exe" -Action Block

    
   Again, adjust “firewallrulename” to designate your rule, and modify “C:/path/to/your/file.exe” with the exact path to your program’s executable file. Press Enter to run the command.
    
   

If you’ve previously added an application to the Firewall through PowerShell and now wish to remove it, follow these simple steps:

1. Open PowerShell as an admin
    
   Launch PowerShell with admin rights by using the hidden Start menu, pressing “Windows + X”, and selecting “Windows PowerShell (Admin)”.
    
   
2. Export a list of your Firewall rules
    
   Before revoking a program’s access through the Firewall, you need to know its rule name. This information can be acquired by exporting a list of all Firewall rules to your desktop using the command below:
    

   Show-NetFirewallRule | Out-File "$env:userprofile/Desktop/WindowsFirewallRules.txt"

    
   

3. Open “WindowsFirewallRules.txt” from your desktop and find your rule name
    
   Locate the rule name next to the “DisplayName” label within the text file. Note it for the upcoming command.
    
   
4. Remove the rule with PowerShell

   Having identified the rule name, remove it by executing the command below:
    

   Remove-NetFirewallRule -DisplayName "YourRule"

   In place of “YourRule”, input the actual name of the rule you wish to delete.
    
   

FAQ – Frequently Asked Questions About Windows Defender Firewall

Can I allow or block a program through Windows Defender Firewall without an admin account?

Does allowing an app through the firewall affect my antivirus protection?

Can Windows Defender Firewall block all incoming traffic?

What should I do if an allowed app still cannot access the internet?

Can I create custom firewall rules beyond just allowing or blocking?

How does blocking a program in the firewall protect my privacy?

Will performing a network reset affect my firewall settings?

What’s the procedure for blocking or allowing an app through the firewall via PowerShell?

If you’re unable to edit firewall settings despite having administrative privileges, this could be due to Group Policy restrictions applied in organizational environments, conflict with third-party security software, or system corruption. If applicable, consult with your IT department regarding Group Policy restrictions. Otherwise, check for software conflicts and consider system repair tools or command-line operations such as sfc /scannow to identify and repair system files.

Incorrect configuration of firewall settings can lead to security vulnerabilities or unnecessary restrictions. For example, excessively permissive rules might allow malicious traffic, increasing the risk of unauthorized access or data breaches. Conversely, overly restrictive rules can block legitimate applications from functioning correctly, potentially disrupting workflows or access to network resources. Hence, careful planning and understanding the functionality of each rule are crucial in firewall management.

To optimize firewall settings for gaming, identify and allow the necessary games and their associated online services through the firewall. This often involves setting specific rules that permit inbound and outbound connections for game servers and ensuring that voice chat or matchmaking services are not inadvertently blocked. Additionally, specifying the appropriate network profile (private or public) based on your gaming setup can help minimize connectivity issues without compromising security.

While Windows Defender Firewall settings are generally applied at a system level affecting all users, the application of rules can differ between network profiles (Private, Public, Domain). However, specific user-targeted rules are not directly supported through the Windows Defender Firewall interface. Alternative methods, such as using third-party software or network policies in organizational environments, may provide more granularity for user-based settings.

To revert changes made to your firewall settings, you can reset the firewall rules to their default state via the Windows Defender Firewall control panel. This option, found under the “Restore defaults” section, will remove all custom rules and revert to the original settings established when Windows was first installed. Use this feature cautiously, as it will erase all modifications including any specific rules you have added for your applications.

Managing Windows Defender Firewall settings remotely is possible but requires setup for remote management tools such as Windows Management Instrumentation (WMI), PowerShell remoting, or Group Policy if within a domain environment. These tools allow administrators to implement and adjust firewall settings across multiple systems from a central location, streamlining network security management for businesses or advanced home networks.

Blocking a critical Windows service could lead to system instability, loss of functionality, or prevent Windows from performing vital operations. It’s imperative to understand the role and necessity of each service before blocking it in the firewall. In case of accidental blocking, restoring default firewall settings or specifically re-allowing the service can help remedy the situation and restore normal operation.