Applies to Windows 8

Windows Firewall from start to finish

What's a firewall?

A firewall is software or hardware that helps prevent hackers and some types of malware from getting to your PC through a network or the Internet. It does this by checking the info that’s coming from the Internet or a network and then either blocking it or allowing it to pass through to your PC.

A firewall isn't the same thing as an antivirus or antimalware app. Firewalls help protect against worms and hackers, antivirus apps help protect against viruses, and antimalware apps help protect against malware. You need all three. You can use Windows Defender, the antivirus and antimalware software that's included with Windows 8, or you can use another antivirus and antimalware app.

You only need one firewall app on your PC (in addition to the firewall that's probably built into your network router). Having more than one firewall app on your PC can cause conflicts and problems.

Windows Firewall comes with Windows and is turned on by default.

Here’s a picture showing how a firewall works:

Illustration showing how a firewall creates a barrier between the Internet and your PCA firewall creates a barrier between the Internet and your PC

We recommend that you use these default firewall settings:

  • The firewall is on for all network types (Private, Public, or Domain).

    Note

    Note

    • PCs running Windows RT or Windows 8 can't join a domain. You can only join a domain if your PC is running Windows 8 Pro or Windows 8 Enterprise.

  • The firewall is on for all network connections.

  • The firewall is blocking all inbound connections except those that you specifically allow.

Turn Windows Firewall on or off

  1. Open Windows Firewall by swiping in from the right edge of the screen, tapping Search (or if you're using a mouse, pointing to the upper-right corner of the screen, moving the mouse pointer down, and then clicking Search), entering firewall in the search box, tapping or clicking Settings, and then tapping or clicking Windows Firewall.

  2. In the left pane, tap or click Turn Windows Firewall on or off . Administrator permission required You might be asked for an admin password or to confirm your choice.

    Left pane of Windows Firewall Left pane of Windows Firewall

  3. Do one of the following:

    • Tap or click Turn on Windows Firewall under each type of network that you want to help protect, and then tap or click OK.

    • Tap or click Turn off Windows Firewall (not recommended) under each network type that you want to stop trying to protect, and then tap or click OK.

    Warning

    Warning

    • You shouldn’t turn off Windows Firewall unless you have another firewall turned on. Turning off Windows Firewall might make your PC (and your network, if you have one) more vulnerable to damage from worms or hackers.

    Note

    Note

    • If your PC is connected to a network, network policy settings might prevent you from completing these steps. For more info, contact your administrator.

Understand Windows Firewall settings

You can customize four settings for each type of network (Public, Private, or Domain). To find these settings, follow these steps:

  1. Open Windows Firewall by swiping in from the right edge of the screen, tapping Search (or if you're using a mouse, pointing to the upper-right corner of the screen, moving the mouse pointer down, and then clicking Search), entering firewall in the search box, tapping or clicking Settings, and then tapping or clicking Windows Firewall.

  2. In the left pane, tap or click Turn Windows Firewall on or off . Administrator permission required You might be asked for an admin password or to confirm your choice.

Here's what the settings do and when you should use them:

  • Turn on Windows Firewall . This setting is selected by default. When Windows Firewall is on, most apps are blocked from receiving info through the firewall. If you want to allow an app to receive info, use the following steps to add it to the list of allowed apps. For example, you might not be able to receive photos in an instant message until you add the instant messaging app to the list of allowed apps.

  • Block all incoming connections, including those in the list of allowed apps. This setting blocks all unsolicited attempts to connect to your PC. Use this setting when you need maximum protection for your PC, such as when you connect to a public network in a hotel or airport. (Blocking happens automatically when you choose the "No, don't turn on sharing or connect to devices" setting for a network. For more info, see Turn sharing on or off.) When you block all incoming connections, you can still view most webpages, send and receive email, and send and receive instant messages.

  • Notify me when Windows Firewall blocks a new app . If you select this check box, Windows Firewall will inform you when it blocks a new app and give you the option of unblocking that app.

  • Turn off Windows Firewall (not recommended) . Avoid using this setting unless you have another firewall app running on your PC.

Note

Note

  • If some firewall settings are unavailable and your PC is connected to a domain, your system administrator might be controlling these settings through Group Policy.

Allow an app to receive info through the firewall

By default, most apps are blocked by Windows Firewall to help make your PC more secure. To work properly, some apps might require you to allow them to receive info through the firewall.

  1. Open Windows Firewall by swiping in from the right edge of the screen, tapping Search (or if you're using a mouse, pointing to the upper-right corner of the screen, moving the mouse pointer down, and then clicking Search), entering firewall in the search box, tapping or clicking Settings, and then tapping or clicking Windows Firewall.

  2. In the left pane, tap or click Allow an app or feature through Windows Firewall .

    Left pane of Windows Firewall Left pane of Windows Firewall

  3. Tap or click Change settings. Administrator permission required You might be asked for an admin password or to confirm your choice.

  4. Select the check box next to the app you want to allow, select the network types you want to allow communication on, and then click OK.

Warning

Warning

Open a port in Windows Firewall

If Windows Firewall is blocking an app and you want to allow that app to receive info through the firewall, you can usually do that by selecting the app in the list of allowed apps, as described in the previous section.

However, if the app isn't listed, you might need to open a port (a way for apps to receive info through the firewall). For example, to play a multiplayer game with friends online, you might need to open a port for the game so that the firewall allows the game info to reach your computer. A port stays open all the time, so be sure to close ports that you don't need open anymore.

  1. Open Windows Firewall by swiping in from the right edge of the screen, tapping Search (or if you're using a mouse, pointing to the upper-right corner of the screen, moving the mouse pointer down, and then clicking Search), entering firewall in the search box, tapping or clicking Settings, and then tapping or clicking Windows Firewall.

  2. In the left pane, tap or click Advanced settings. Administrator permission required You might be asked for an admin password or to confirm your choice.

  3. In the Windows Firewall with Advanced Security dialog box, in the left pane, tap or click Inbound Rules, and then, in the right pane, tap or click New Rule.

  4. Follow the instructions on your screen.