How To Allow Or Block Apps In Windows Firewall in Windows 10

Windows 10 comes with a built-in Firewall app. It provides security from hackers and malicious software trying to access your PC using your network connection. It is possible to allow or deny a specific app from accessing the Internet. In this article, we'll see how it can be done.


In Windows 10, Windows Firewall is based completely on the Windows Filtering Platform API and has IPsec integrated with it. This is true since Windows Vista where the firewall added outbound connection blocking and also comes with an advanced Control Panel called Windows Firewall with Advanced Security. It gives fine-grained control over configuring the firewall. The Windows Firewall supports multiple active profiles, co-existence with third-party firewalls, and rules based on port ranges and protocols.

Before you allow or deny apps in the Windows Firewall, ensure that you are signed in as an administrator.

To allow an app through Windows Firewall, do the following.

For some apps, like Total Commander, a special prompt "Windows Security Alert" may appear as shown in the screenshot below. It can be used to allow or deny the app from accessing the network. Select the network locations you want to allow (private or public) or uncheck them all to block the app.Firewall Request

To allow an app through Windows Firewall using Firewall Settings, do the following.

  1. Open Settings.
  2. Go to Network & Internet - Status.
  3. Scroll down to the link "Windows Firewall" and click it.Settings Firewall Link
  4. The following window will be opened. There, click the link "Allow an app or feature through Windows Firewall" on the left side.Windows Firewall UI
  5. Click the button "Change settings" if you have UAC enabled to unblock other buttons.Windows Firewall Change Settings Button
  6. To allow some app, click on the button "Allow another app".Firewall Allow Another App Button
  7. In the next dialog, click the Browse button and pick an app you want to allow through Windows Firewall.Firewall Browse For App
  8. Now, click on the button "Network types...". Firewall Network Type ButtonIn the next dialog, select public, private or both network types to allow the app.Firewall Select Network Type
  9. Click on the "Add" button and you are done.Firewall Add ButtonAllow Apps In Windows Firewall In Windows 10

Alternatively, you can use the netsh command to allow the app to access the network.
Here is a rule-based example for Total Commander, which does the same as above:

netsh advfirewall firewall add rule name="Total Commander 32-bit" dir=in action=allow program="C:\Totalcmd\TOTALCMD.exe" enable=yes

You need to type it at an elevated command prompt.
Correct the file path and the rule name to fit your requirements.

Just like the steps for allowing an app, you can block certain apps from accessing the network.

To block an app in Windows Firewall, you can execute the following command:

netsh advfirewall firewall add rule name="Total Commander 32-bit" dir=in action=block program="C:\Totalcmd\TOTALCMD.exe" enable=yes

The main difference from the previous command is the "action=block" portion, which blocks the app from accessing the Internet.

In the Firewall settings, you can also block the allowed app. You can uncheck the check for the rule in the app's list (see the screenshot below) or remove the rule completely.

Untick The Rule

To remove the rule completely, select the desired app in the list and click the "Remove..." button.Block Apps In Windows Firewall In Windows 10

Finally, you can save your time and use our tiny OneClickFirewall app. After installing, it adds two context menu entries: Block Internet Access and Restore Internet Access.

Under the hood, OneClickFirewall uses netsh commands mentioned above. You might find this method faster.

That's it.

Support us

Winaero greatly relies on your support. You can help the site keep bringing you interesting and useful content and software by using these options:


3 thoughts on “How To Allow Or Block Apps In Windows Firewall in Windows 10

  1. Haibat

    In my firewall idm is not visible but it always stopped my idm and i got message for registration. any solution

  2. roderick dixon

    very good instructions. thank you

  3. Debbie

    Excellent instructions. Clear and concise. Thanks for helping me, step by step, to overcome my fear of technology. :)


Leave a Reply

Your email address will not be published. Required fields are marked *