Reset Firewall Settings in Windows 11

To reset firewall settings in Windows 11, open Windows Security, go to Firewall & network protection, click “Restore firewalls to default” on each active network profile, and confirm. This restores all firewall rules to the original Microsoft defaults, which can fix broken network access or blocked apps caused by misconfigured rules.

Why Reset the Windows Firewall?

The Windows Defender Firewall filters inbound and outbound traffic based on a set of rules. Over time, third-party security software, manual rule changes, or failed updates can leave the firewall in a state that blocks legitimate programs or exposes your system. Resetting to defaults clears all custom inbound and outbound rules, reverts settings like notifications and allowed apps, and gives you a clean baseline. This is often the fastest fix for “no internet after installing a VPN” or “can’t share files on the local network” problems.

It’s important to understand that resetting does not disable the firewall—it simply restores the factory configuration. After a reset, Windows will prompt you again when a new program wants to listen on a port or connect out, which is the normal behavior for a fresh install.

Before You Reset: What You Lose

Resetting to default removes every custom rule you or an application created. This includes:

Rules for port forwarding you set up manually (e.g., for a game server or a security camera).
Exceptions for specific apps like a third-party firewall or a remote desktop tool.
Any changes made by enterprise policies if you’re on a managed device (though those may reapply after a reboot).
Custom notification settings for each profile (Domain, Private, Public).

If you have a complex setup—say, a Hyper-V virtual switch or a Docker installation—those tools often add their own firewall rules. After a reset, you may need to reinstall or reconfigure the software to recreate those rules. It’s wise to export your current policy before resetting (via the “Export policy” link in the Windows Defender Firewall with Advanced Security console) so you can compare or restore if needed.

Method 1: Reset via Windows Security (GUI)

The most straightforward approach uses the built-in Windows Security app, which is the same interface you use to check virus protection.

Open the Start menu, type Windows Security, and press Enter.
Select Firewall & network protection from the left sidebar.
Click the network profile you want to reset—Domain network, Private network, or Public network. (If you’re on a home PC, you’ll likely see only Private and Public.)
Scroll down to the Restore firewalls to default section and click the Restore now button.
Confirm the User Account Control prompt, then click Yes when asked to reset.

Repeat for each profile you want to reset. If you’re unsure which profile is active, look for the one that says “Active” next to the network name. Resetting all three is safe and takes only a few seconds.

Method 2: Reset via Command Prompt or PowerShell

For a scripted reset or when the GUI isn’t responding, use the command line. This method resets all profiles at once.

Right-click the Start button and select Terminal (Admin) or Command Prompt (Admin).
Type the following command and press Enter:

netsh advfirewall reset

This command restores the firewall policy to the default out-of-box state. You’ll see no success message, but the operation completes silently. To verify, run:

netsh advfirewall show allprofiles

Look for “State” to be ON and “Firewall Policy” to be “BlockInbound,AllowOutbound”—that’s the default behavior.

PowerShell users can also use Set-NetFirewallProfile -DefaultInboundAction Block -DefaultOutboundAction Allow, but the netsh command is simpler and works on all editions of Windows 11.

Method 3: Use the Advanced Security Console

If you need to reset only specific rules rather than the entire policy, the Windows Defender Firewall with Advanced Security console gives you finer control. Open it by typing wf.msc in the Run dialog (Win+R). In the left pane, you can right-click Inbound Rules or Outbound Rules and select Reset Policy—this restores all rules in that category to defaults. However, this is essentially the same as the full reset, so it’s rarely needed unless you want to keep some custom settings.

For most users, the GUI method or the netsh command is sufficient. The Advanced console is more useful for exporting a backup before you reset.

What to Do After Resetting

Once you’ve reset, you should:

Check that your internet works by visiting a website.
Test any apps that were previously blocked—Windows will ask for permission again, which is normal.
If you use a VPN, reconnect it and verify the connection. Some VPNs add firewall rules to prevent leaks; you may need to reinstall the VPN client if it doesn’t auto-recreate them.
If you’re on a domain network, the domain policy may reapply after a reboot, overwriting your reset. That’s expected.

If the problem persists after a reset, the issue is likely not the firewall. Check your network adapter settings, router configuration, or antivirus software that may have its own firewall component.

Common Problems and Misconceptions

One common misconception is that resetting the firewall will “unblock” a program that Windows is silently blocking. In reality, Windows blocks programs only when they try to listen on a port or connect out without a rule, and it usually shows a prompt. If you’ve previously clicked “Cancel” on that prompt, the block is recorded in the firewall rules, and a reset will clear it—so yes, in that specific case, a reset helps.

Another issue: after a reset, some users find that file and printer sharing stops working. That’s because the default rules for those features are disabled until you turn them on via the “Allow an app through firewall” settings. You can re-enable them by going to Firewall & network protection > Allow an app through firewall and checking the boxes for “File and Printer Sharing” for the appropriate network type.

If you’re using a third-party antivirus with its own firewall, resetting the Windows Firewall won’t affect that product. You’ll need to reset the third-party firewall separately, usually from its own settings interface.

Frequently Asked Questions

Will resetting the firewall delete my network settings?

No. The reset only affects firewall rules and policies. Your IP address, DNS servers, Wi-Fi passwords, and network adapters remain untouched. It’s safe to do without worrying about losing your network connection configuration.

Do I need to reset all three profiles (Domain, Private, Public)?

Not necessarily, but it’s recommended if you’re troubleshooting. The active profile is the one that applies to your current network. If you only use your PC at home on a private network, resetting that profile is enough. But resetting all three ensures consistency and avoids confusion later.

Why can’t I click “Restore now” in Windows Security?

This happens when you’re not logged in as an administrator, or when a group policy (from your organization) enforces a specific firewall state. If you’re on a work computer, contact your IT department—they may have locked the firewall settings. On a personal PC, make sure you’re using an admin account.

Will a firewall reset remove malware?

No. The firewall is not an antivirus. Resetting it only clears rules; it doesn’t scan for or remove malicious software. If you suspect malware, run a full scan with Windows Defender or a reputable third-party antivirus.

What if the firewall still doesn’t work after reset?

Try restarting the Windows Defender Firewall service. Open Services (services.msc), find “Windows Defender Firewall,” right-click and select Restart. If that fails, run the Windows Network Diagnostics tool (Settings > System > Troubleshoot > Other troubleshooters) or check for Windows updates that might address firewall bugs.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →