Search guides

Fix a Windows firewall that blocks an app

We'll allow the app through wf.msc, add inbound or outbound rules, use Allow an app—or tell you when to contact IT.

Troubleshooting · Home maintenance
10–20 min
What you'll need
  • Admin access to the PC
  • The app path (e.g. C:\\Program Files\\App\\app.exe)
Step 1 of 6

Quick triage — pick your path

Get started

Choose the option that matches what you see. You can jump straight to that section.

Show full guide

Steps

Goal: Confirm Windows Firewall is blocking, allow the app, and resolve the block.

Allow an app (simple)

Goal: Use the simple Allow an app interface.

  • Open Windows Security > Firewall & network protection > Allow an app through firewall.
  • Click Change settings. Find the app and check Private and Public.
  • If the app is not listed, click Allow another app and browse to the .exe.
  • Good: The app connects.
  • Bad: Proceed to Add rule in wf.msc.

Add rule in wf.msc

Goal: Add an inbound rule or outbound rule in wf.msc.

  • Press Win+R, type wf.msc, press Enter.
  • Inbound: Inbound Rules > New Rule > Program > browse to the app > Allow.
  • Outbound: Outbound Rules > New Rule > Program > browse to the app > Allow.
  • Some apps need both. Add both rules if needed.
  • Restart the app. Retest.
  • Good: The app connects.
  • Bad: Check if the firewall is managed by IT (grayed out options).

When to get help

Contact IT if:

  • “Allow an app” is grayed out.
  • The firewall is managed by Group Policy.
  • You cannot add rules.

Provide the app name and error message.

Verification

  • The app connects with Windows Firewall enabled.
  • The app appears in “Allow an app” or has rules in wf.msc.
  • No firewall prompts when the app runs.

Escalation ladder

Work from the device outward. Stop when the problem is fixed.

  1. Confirm block Temporarily disable firewall to verify it is the cause.
  2. Allow an app Use Windows Security > Allow an app through firewall.
  3. Inbound rule Add inbound rule in wf.msc if app accepts connections.
  4. Outbound rule Add outbound rule in wf.msc if app connects out.
  5. Contact IT Escalate if firewall is managed or rules cannot be added.

What to capture if you need help

Before calling support or posting for help, have these ready. It speeds everything up.

  • App name and path
  • Inbound or outbound (or both)
  • Steps already tried

Does the app work when Windows Firewall is off?

Temporarily disable the firewall to confirm it is the cause. Re-enable before adding rules.

In Windows Security > Firewall, turn off the firewall for the active network. Retest the app. Works with firewall off: Windows Firewall is blocking—re-enable and allow the app. Still fails: the cause is elsewhere (antivirus, network).

Yes (firewall is blocking) No

You can change your answer later.

Allow the app through firewall

Use "Allow an app" or wf.msc to add a rule.

Try Allow an app: Windows Security > Firewall > Allow an app through firewall. Find the app and check Private and Public. If not listed, browse to the .exe. Or use wf.msc: add inbound rule or outbound rule for the app. Retest.

Yes No

You can change your answer later.

Add both inbound and outbound rules

Some apps need both. In wf.msc, add an inbound rule and an outbound rule for the app executable. Restart the app. Retest.

Yes No

You can change your answer later.

Issue resolved

Windows Firewall allows the app. The app should connect.

Done

Issue may not be Windows Firewall

If the app still fails with the firewall off, check fix-antivirus-blocks-connection or fix-firewall-blocks-port. The block may be from antivirus or another firewall.

Done

Contact IT

If "Allow an app" is grayed out or you cannot add rules, the firewall may be managed by Group Policy. Contact IT. Provide the app name and error message.

Done

Reviewed by Blackbox Atlas

Frequently asked questions

How do I open Windows Firewall settings?
Press Win+R, type wf.msc, press Enter. Or go to Windows Security > Firewall & network protection > Advanced settings. wf.msc opens the advanced firewall directly.
Should I allow inbound or outbound?
Inbound: someone connects to your PC (e.g. Remote Desktop, game hosting). Outbound: your app connects out (e.g. game client, VPN). Add the rule that matches the app behavior.
What if "Allow an app" is grayed out?
Grayed out usually means the firewall is managed by Group Policy or IT. You need admin rights or must contact IT to change firewall rules.

Rate this guide

Was this helpful?

Continue to