How to Check Firewall Settings in Windows 10

This guide walks you through checking your Windows 10 firewall settings, showing you how to see which rules are active, confirm the firewall is on, and understand what each setting means. You don’t need any special tools—everything is built into Windows. You’ll use the Windows Defender Firewall control panel and the advanced settings console to inspect your configuration.

What You’ll Need

A Windows 10 PC with administrator access (you’ll need to approve User Account Control prompts).
About five minutes of time.

Step-by-Step

Open the Windows Security app. Click the Start button (Windows logo) in the bottom-left corner, then click the gear icon (Settings). In the Settings window, click “Update & Security,” then select “Windows Security” from the left sidebar. Alternatively, type “Windows Security” into the search box next to the Start button and press Enter.
Go to Firewall & network protection. In the Windows Security window, click the tile labeled “Firewall & network protection.” This is the main hub for all firewall controls.
Check the firewall status for each network profile. You’ll see three profiles listed: “Domain network,” “Private network,” and “Public network.” Each one has a toggle switch. If the toggle is blue and says “On,” the firewall is active for that profile. If it’s gray and says “Off,” the firewall is disabled for that profile. Most home users will care about “Private network” (home Wi-Fi or Ethernet) and “Public network” (coffee shop Wi-Fi, hotel networks).
Review active notifications and alerts. Below the profile toggles, look for a section called “Firewall & network protection settings.” Click “Manage notifications.” Here, you can see whether Windows is set to notify you when a new app is blocked. You can also turn these notifications on or off for each profile. This is useful for understanding why you may or may not see pop-ups when apps try to connect.
Open the advanced firewall console. Scroll back to the top of the “Firewall & network protection” page and click “Advanced settings.” This opens the Windows Defender Firewall with Advanced Security window. This is the deep-dive view where you can see every rule.
View inbound and outbound rules. In the left pane of the advanced window, you’ll see three main sections: “Inbound Rules,” “Outbound Rules,” and “Connection Security Rules.” Click “Inbound Rules” to see a list of all programs and services that are allowed or blocked from receiving connections from the internet or your local network. Click “Outbound Rules” to see rules controlling which programs can initiate connections out to the internet.
Understand the rule list. The rules are displayed in a table. The “Name” column shows the program or service. The “Group” column shows which program or Windows feature the rule belongs to. The “Profile” column shows which network profiles the rule applies to (Domain, Private, Public, or all). The “Enabled” column shows whether the rule is currently active (Yes or No). The “Action” column shows whether the rule “Allows” or “Blocks” the connection. The “Override” column is usually blank but can show “Yes” if the rule overrides a block rule.
Check the firewall properties. In the advanced window, right-click “Windows Defender Firewall with Advanced Security” at the top of the left pane and select “Properties.” This opens a dialog with tabs for each profile (Domain, Private, Public). On each tab, you can see the firewall state (On/Off), the default inbound and outbound behavior (Block or Allow), and whether notifications are enabled. This is the most direct way to see the core configuration.
Review a specific rule’s details. Double-click any rule in the list to open its properties. The “General” tab shows the name, description, enabled status, and action (Allow/Block). The “Programs and Services” tab shows which executable file the rule applies to. The “Protocols and Ports” tab shows the protocol (TCP/UDP) and port numbers. This is how you verify exactly what a rule does.
Close the windows when done. Once you’ve reviewed what you need, click OK or Cancel to close any open dialogs, then close the advanced window and the Windows Security app.

Common Mistakes

Checking the wrong profile. Many people look only at the “Public” or “Private” toggle and miss that the “Domain” profile might be off. If your PC is joined to a work or school domain, the domain profile is what matters most.
Assuming the firewall is off when it’s not. A third-party antivirus suite (like Norton, McAfee, or Bitdefender) often disables the Windows Defender Firewall and replaces it with its own. In that case, the Windows Security page may show “Off” or “No active firewall,” but your PC is still protected by the third-party software.
Confusing “Enabled” with “Allowed.” A rule can be enabled (active) but set to “Block.” An enabled rule that blocks a program is working correctly—it’s not a sign of a problem.
Editing rules without understanding them. Changing a rule from “Block” to “Allow” can expose your PC to security risks. Only make changes if you know exactly what the program is and why it needs the connection.

Tips

Use the search box in the advanced console. If you’re looking for a specific program, type its name into the search box at the top of the rule list. This filters the list quickly.
Export your rules before making changes. In the advanced console, right-click “Windows Defender Firewall with Advanced Security” and select “Export Policy.” Save the .wf file somewhere safe. If you mess something up, you can import it back to restore your original settings.
Check the “Profile” column carefully. A rule might apply only to “Public” networks, not “Private.” If you’re on your home Wi-Fi and a program isn’t working, check that the rule covers “Private” as well.
Use the “Filter by Profile” option. In the advanced console, click “Filter by Profile” in the right pane and select “Public” or “Private” to see only rules that apply to that network type. This reduces clutter.
Look at the “Edge Traversal” setting. For inbound rules, the “Edge Traversal” column (if visible) indicates whether the rule allows connections through a NAT (Network Address Translation) device. This is rarely needed for home users, but it matters for gaming or hosting servers.

Troubleshooting

You can’t open the Windows Security app. If the app won’t open or shows an error, restart your PC. If it persists, run the Windows Security troubleshooter: Go to Settings > Update & Security > Troubleshoot > Additional troubleshooters, then select “Windows Security” and run it.
The firewall toggle is grayed out. This usually means a third-party antivirus is managing the firewall. Open your antivirus program’s settings and look for its firewall controls. You may need to disable its firewall or add an exception there instead of in Windows.
You see “No active firewall” but you have a third-party one. This is normal. The Windows Security app only reports on Microsoft’s firewall. Your third-party firewall is active but not shown here. Check your antivirus’s own status screen to confirm it’s on.
You can’t see the “Advanced settings” link. If the link is missing, your PC may be managed by an organization (work or school). Group Policy can hide this option. Contact your IT administrator for help.
Changes you make don’t stick. If you toggle the firewall off and it turns back on, a group policy or third-party security software is overriding your change. Check your antivirus settings first, then look at Group Policy (gpedit.msc) under Computer Configuration > Administrative Templates > Network > Network Connections > Windows Defender Firewall.
The advanced console shows no rules at all. This is rare but can happen if the Windows Firewall service is stopped. Press Win + R, type “services.msc,” and press Enter. Find “Windows Defender Firewall” in the list, double-click it, and ensure the “Startup type” is “Automatic” and the “Service status” is “Running.” If it’s stopped, click “Start.”

Frequently Asked Questions

Q: Is the Windows firewall on by default?
Yes, Windows 10 enables the Windows Defender Firewall by default for all three network profiles (Domain, Private, Public). Unless you or a third-party program disabled it, it should be on.

Q: What’s the difference between inbound and outbound rules?
Inbound rules control traffic coming into your PC from the internet or your local network (e.g., a web server responding to a request). Outbound rules control traffic leaving your PC (e.g., your browser connecting to a website).

Q: Should I turn off the firewall?
Generally, no. The firewall protects you from unauthorized incoming connections. Turning it off exposes your PC to network-based attacks. Only disable it temporarily for troubleshooting, and turn it back on immediately.

Q: Why is a program blocked even though I allowed it?
There may be two rules for the same program—one allowing and one blocking. Windows applies the more restrictive rule when there’s a conflict. Check both inbound and outbound rules for the program, and look for any “Block” rules that are enabled.

Q: Can I check firewall settings from the Command Prompt?
Yes. Open Command Prompt as administrator and type netsh advfirewall show allprofiles. This displays the firewall state, default actions, and notification settings for all profiles in a text format.

Q: How do I know if a specific port is open?
In the advanced console, click “Inbound Rules,” then sort by “Protocols and Ports” column. Look for the port number you’re checking. If you don’t see it, the port is likely closed to incoming traffic. You can also use the netstat -ab command in Command Prompt to see active connections and listening ports.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →