How to Allow Apps Through Windows Firewall

Windows Firewall blocks unsolicited network traffic to help protect your PC. If a trusted application cannot communicate correctly, you can add that application to the allowed-apps list instead of disabling the firewall.

Microsoft notes that both allowing an app and opening a port increase risk, but allowing the app is generally safer than leaving a port open.

Allow an app through the firewall

Open Windows Security.
Select Firewall & network protection.
Select Allow an app through firewall.
Select Change settings. Administrator approval may be required.
Find the app in the list and select the appropriate network profile.
If the app is not listed, select Allow another app and browse to the program.
Select OK.

Only allow software you recognize and trust.

Private vs. public networks

The allowed-apps list can apply to different network profiles:

Private: networks you trust, such as your home network.
Public: networks such as cafés, hotels, or airports, where other devices should be treated as untrusted.

If an app only needs local-network access at home, allowing it on Private networks only is usually the safer choice.

When a port rule is actually required

Some server or networking software requires a specific inbound port rather than a normal application exception.

To create a rule:

Open Windows Security > Firewall & network protection.
Select Advanced settings.
Select Inbound Rules.
Choose New Rule and follow the wizard.

Open only the port, protocol, and network profiles the application requires. Disable or remove the rule when it is no longer needed.

Do not turn off the firewall as a workaround

If an application is blocked, add a narrow exception instead of disabling Windows Firewall. Turning off the firewall can expose the PC to unwanted network access.

If an app still cannot connect

Confirm the problem is actually the firewall by checking the app’s error message and vendor documentation.
Make sure the correct executable is allowed.
Check whether a VPN, security suite, router firewall, or organization policy is also filtering traffic.
Remove stale exceptions for software you no longer use.