Fix Windows that has firewall that blocks app
We'll allow the app through wf.msc, add inbound or outbound rules, use Allow an app—or tell you when to contact IT.
What you'll need
- Admin access to the PC
- The app path (e.g. C:\\Program Files\\App\\app.exe)
Step-by-step diagnostic
Quick triage — pick your path
Get started
Choose the option that matches what you see. You can jump straight to that section.
- Follow this guide Work through the full procedure from confirming the block to allowing the app.
- Allow an app (simple) You want to use the simple "Allow an app" interface.
- Add rule in wf.msc You need inbound or outbound rules in the advanced firewall.
- When to contact IT The firewall is managed or options are grayed out.
Show full guide
Steps
Goal: Confirm Windows Firewall is blocking, allow the app, and resolve the block.
- Temporarily disable Windows Firewall (Windows Security, Firewall). Retest the app.
- Good: It works with the firewall off—Windows Firewall is blocking. Re-enable and allow the app.
- Bad: Still fails—check fix-antivirus-blocks-connection or fix-firewall-blocks-port.
Allow an app (simple)
Goal: Use the simple Allow an app interface.
- Open Windows Security, Firewall & network protection, Allow an app through firewall.
- Click Change settings. Find the app and check Private and Public.
- If the app is not listed, click Allow another app and browse to the .exe.
- Good: The app connects.
- Bad: Proceed to Add rule in wf.msc.
Add rule in wf.msc
Goal: Add an inbound rule or outbound rule in wf.msc.
- Press Win+R, type wf.msc, press Enter.
- Inbound: Inbound Rules, New Rule, Program, browse to the app, Allow.
- Outbound: Outbound Rules, New Rule, Program, browse to the app, Allow.
- Some apps need both. Add both rules if needed.
- Restart the app. Retest.
- Good: The app connects.
- Bad: Check if the firewall is managed by IT (grayed out options).
When to get help
Contact IT if:
- “Allow an app” is grayed out.
- The firewall is managed by Group Policy.
- You cannot add rules.
Provide the app name and error message.
Verification
- The app connects with Windows Firewall enabled.
- The app appears in “Allow an app” or has rules in wf.msc.
- No firewall prompts when the app runs.
Escalation ladder
Work from the device outward. Stop when the problem is fixed.
- Confirm block Temporarily disable firewall to verify it is the cause.
- Allow an app Use Windows Security, Allow an app through firewall.
- Inbound rule Add inbound rule in wf.msc if app accepts connections.
- Outbound rule Add outbound rule in wf.msc if app connects out.
- Contact IT Escalate if firewall is managed or rules cannot be added.
What to capture if you need help
Before calling support or posting for help, have these ready. It speeds everything up.
- App name and path
- Inbound or outbound (or both)
- Steps already tried
Does the app work when Windows Firewall is off?
Temporarily disable the firewall to confirm it is the cause. Re-enable before adding rules.
You can change your answer later.
Allow the app through firewall
Use "Allow an app" or wf.msc to add a rule.
You can change your answer later.
Add both inbound and outbound rules
You can change your answer later.
Issue resolved
Issue may not be Windows Firewall
Contact IT
Reviewed by Blackbox Atlas
Frequently asked questions
- How do I open Windows Firewall settings?
- Press Win+R, type wf.msc, press Enter. Or go to Windows Security, Firewall & network protection, Advanced settings. wf.msc opens the advanced firewall directly.
- Should I allow inbound or outbound?
- Inbound: someone connects to your PC (e.g. Remote Desktop, game hosting). Outbound: your app connects out (e.g. game client, VPN). Add the rule that matches the app behavior.
- What if "Allow an app" is grayed out?
- Grayed out usually means the firewall is managed by Group Policy or IT. You need admin rights or must contact IT to change firewall rules.
Rate this guide
Was this helpful?
Thanks for your feedback.