How to allow apps through firewall on Windows 11

• To allow app access through Windows 11 firewall, open Windows Security > Firewall & network protection, click the “Allow an app through firewall” option, click the “Change settings” option, allow the app in the firewall, and click the “OK” button.

Microsoft Defender Firewall is one of the many security features available on Windows 11 to protect your computer and files from outside threats as well as from inside threats trying to get out.

A firewall works as a gatekeeper and blocks unused network ports, and every time an app wants to communicate outside your device, it checks if a rule exists in its database to allow or deny network access. If a rule doesn’t exist, the firewall will prompt you to identify and grant or deny permission.

While the Microsoft Defender Firewall does a pretty good job managing which apps and features should connect through the network automatically, sometimes you may need to allow or deny an app manually.

In this guide, I’ll show you how to allow or deny app access through the firewall on Windows 11.

• Allow apps through firewall using Security on Windows 11
• Allow apps through firewall using PowerShell on Windows 11

Allow apps through firewall using Security on Windows 11

To allow an app through the Windows 11 firewall, use these steps:

1. Open Windows Security.

2. Click on Firewall & network protection.

3. Click the “Allow an app through firewall” option.

   

4. Click the Change settings button.

5. Check the app to allow it through the Windows 11 firewall.

   

   Quick tip: If the app isn’t on the list, click the “Allow another app” button to locate the application you want to allow.

6. Choose the “Private” option for home or work, or the “Public” option to allow the app in public places, such as in a coffee shop.

7. Click the OK button.

Once you complete the steps, the app will have full network access on Windows 11.

If you want to block an app through the firewall, follow the instructions above, but at step No. 5, make sure to clear the checkmark for the app or feature you want to deny network access.

Allow apps through firewall using PowerShell on Windows 11

To allow an app through the firewall using PowerShell, use these steps:

1. Open Start.

2. Search for PowerShell, right-click the top result, and select the Run as administrator option.

3. Type this command to use PowerShell to allow an app through the firewall and press Enter:

   New-NetFirewallRule -DisplayName "RULE-NAME" -Direction Inbound -Program "C:\Path\To\App.exe" -Action Allow -Profile Domain,Private,Public

   

   In the command, specify the rule name, path, and the executable file for the application, and choose which firewall profiles to use (Domain, Private, and/or Public).

4. Type this custom command to check the new rule and press Enter:

   Get-NetFirewallRule -DisplayName "RULE-NAME"

5. (Optional) Type this custom command to delete the rule and press Enter:

   Remove-NetFirewallRule -DisplayName "RULE-NAME"

After you complete the steps, the PowerShell command will create a new rule that grants the app full network access on Windows 11.

Firewall rule command example:

• New-NetFirewallRule -DisplayName "Zoom" -Direction Inbound -Program "C:\Users\UserProfile\AppData\Roaming\Zoom\bin\Zoom.exe" -Action Allow -Profile Private,Public
• Get-NetFirewallRule -DisplayName "Zoom"
• Remove-NetFirewallRule -DisplayName "Zoom"

This guide focuses on the Microsoft Defender Firewall. However, if you have another security solution, the instructions will be different. As such, you should check your software company’s support website for more specific steps.

Update January 23, 2026: This guide has been updated to ensure accuracy and reflect changes to the process.