A Wi-Fi or “connected” indicator only confirms that one check succeeded; it does not prove that DNS, the route to a server, a particular port, or the app itself is working. To find the fault without making things worse, narrow the scope first, then test from the local interface outward: gateway, external IP, hostname, and the exact service that fails.
1. Narrow down what is failing
Before changing settings or restarting equipment, establish the scope. A Windows Wi-Fi status can say connected even when a specific app or website cannot connect. Note the exact error, the time it occurred, and whether the failure is constant or intermittent.
As an Amazon Associate I earn from qualifying purchases.
- Does the problem affect one device or several?
- Does one app or website fail, or do all destinations fail?
- Does the same device work over Ethernet, or does wired access fail too?
- Can another device reach the same destination on the same network?
These comparisons help separate a device-specific issue from a network-wide or destination-specific one. Microsoft’s TCP/IP troubleshooting guidance also notes that a status indicator does not establish that every application connection is healthy.
Free tools Windows power users keep installed
One-click scans. No signup required.
2. Check the local connection and IP configuration
Confirm that the intended network interface is enabled, that Wi-Fi is connected to the expected network, and that airplane mode is off. On Windows, open Command Prompt and run:
#1 Best Overall
- Cable performance testing up to 10GBASE-T plus troubleshooting (distance to fault, wire map, toning)
- Network features include IPv4 and v6 ping, nearest switch diagnostics (IP address, name, port / VLAN number, and advertised data rates).
- Ethernet Alliance-certified PoE Verification detects the PoE class (1-8) and power, and performs a load test of available PoE from the connected switch
- Wi-Fi analysis to Wi-Fi 6E, including networks, channels, and access points
ipconfig /allCheck the active adapter’s IP address, subnet mask, default gateway, DNS server, and connection-specific DNS suffix. Microsoft recommends verifying that these values fit the network in use; an incorrect or missing value can point to a local configuration or DHCP problem. Record the current values before renewing an address or resetting anything. See Microsoft’s DNS client troubleshooting guidance.
If the device uses DHCP and its address appears stale or invalid, a DHCP renewal may help, but it is a change rather than a diagnostic test. If the device is managed by an organization, check with its administrator before making network resets.
3. Test connectivity one layer at a time
Use tests in sequence so each result answers a specific question. A ping uses ICMP; it is not a generic test of web or application connectivity. Firewalls and routers may block ICMP while allowing the service you need, so a timeout by itself does not prove that the destination is unreachable.
Rank #2
- Cable performance testing up to 10GBASE-T plus troubleshooting (distance to fault, wire map, toning)
- Network features include IPv4 and v6 ping, nearest switch diagnostics (IP address, name, port / VLAN number, and advertised data rates).
- Ethernet Alliance-certified PoE Verification detects the PoE class (1-8) and power, and performs a load test of available PoE from the connected switch
- Wi-Fi analysis to Wi-Fi 6E, including networks, channels, and access points
- Test the gateway. From the Windows configuration, identify the default gateway, then run
ping <gateway-address>. A response indicates that this ICMP exchange reached the gateway; no response may reflect filtering as well as a local-path fault. - Test a known external IP address. If the gateway responds, try an external IP that is appropriate for your situation. A successful response suggests some IP reachability beyond the local network, but it does not test DNS or the application’s port. A failed ping may simply mean ICMP is not permitted.
- Test name resolution. If an IP-based test succeeds but a hostname does not, query the configured DNS resolver with
nslookup example.com. The result can show whether the resolver answers and returns an address. A DNS server that fails to answer ping is not, by itself, proof that DNS service is unavailable. - Test the actual service. For a particular app or site, test the destination host and the port the service uses when you have that information. A TCP connection test to the actual listening port is more relevant than ping when diagnosing an application connection. If the port connects, shift attention to the application, its configuration, or the response it receives.
Microsoft explains the limits of ICMP and the value of testing a listening port in its TCP/IP communication troubleshooting guidance. For DNS-specific checks and nslookup, see Troubleshooting DNS clients.
4. Check the destination, firewall, VPN, and application
If only one service fails, verify that you have the correct destination name and port. Then consider what could intercept or block that connection: a local firewall, proxy, VPN, antivirus network filter, or other security software. VPN and security tools can change the route or apply policies that do not affect other apps.
On macOS, Apple recommends checking whether a VPN or other software that monitors or interacts with network connections is involved. Its Wi-Fi guidance also covers restarting or renewing the address, verifying date and time, checking router firmware, and testing another network: If your Mac isn’t connecting to the internet over Wi-Fi. On Windows, use Get Help’s network troubleshooter if available, and verify Wi-Fi state and airplane mode before moving to advanced resets; Microsoft’s Wi-Fi connection troubleshooting steps cover these checks.
Rank #3
- Performance testing on EtherNet/IP, PROFINET, EtherCAT and other Industrial Ethernet cabling plus troubleshooting (distance to fault, wire map, toning)
- Network features including: IPv4 and v6 ping, nearest switch diagnostics (IP address, name, port / VLAN number, and advertised data rates).
- Ethernet Alliance certified PoE Verification – Detects the PoE class (1-8) and power, and performs a load test of available PoE from the connected switch
- Wi-Fi analysis to Wi-Fi 6E, including networks, channels, and access points
Do not disable security software broadly as a first step, especially on a work device. If a test requires changing a VPN, firewall, or filter setting, follow your organization’s policy and restore the setting afterward. A working TCP connection to the right port makes a network path failure less likely, but it does not prove the app is functioning correctly.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →5. Inspect the route only when it can clarify the failure
When basic IP and service tests suggest a problem beyond the device, a route trace can show which hops report the probes. Windows uses tracert; Linux and macOS commonly use traceroute. MTR combines route discovery with repeated measurements, which can help reveal changing latency or reported loss over time. Availability and command options vary by system; see Cloudflare’s guidance on gathering information for troubleshooting sites.
An unanswered hop is not proof that traffic is being lost there. Some routers do not respond to diagnostic probes, even while forwarding ordinary traffic. Likewise, loss reported at one hop does not assign responsibility: local security policy, resource limits, missing routes, congestion, remote policy, session loss, or MTU-related drops can all contribute. Look for evidence that affects the end-to-end destination, not just one intermediate response. Microsoft discusses several possible causes in Diagnose Packet Loss.
Rank #4
- PREMIUM 3-YEAR ASSURANCE BUNDLE – Get the full power of the SignalTEK QT Pro with the added security of a total of 3-year warranty and a heavy-duty rugged hard carry case. This professional bundle is designed to protect your investment in the harshest field environments.
- EXPANDED COPPER & FIBER TESTING – Includes a full set of 12 remote IDs (Male & Female #1-12) for high-volume copper testing up to 10Gb/s. Qualify fiber links up to 100Gb/s with included High-Stability Single-mode (1310nm) and Multimode (850nm) SFP modules and Cable Tracing Probe.
- ADVANCED WI-FI & NETWORK DIAGNOSTICS – Perform comprehensive Wi-Fi site surveys and troubleshooting using both internal and external antennas. Identify channel conflicts, locate hidden APs, and verify network performance across 2.4GHz and 5GHz bands.
- 90W POE LOAD TESTING & TOOLS – Validate PoE power delivery up to 90W (802.3 af/at/bt) with actual load testing. Built-in network tools include VLAN detection, Device Discovery, Ping, Traceroute, and Switch Port identification for rapid troubleshooting.
- CLOUD MANAGEMENT & REMOTE SUPPORT – Manage projects and share professional PDF reports instantly via TREND AnyWARE Cloud. Features integrated TeamViewer and VNC support, allowing off-site managers to assist technicians in real time.
6. Follow the troubleshooting path for your platform
Windows
Start with the Windows network troubleshooter in Get Help, if available, and check the adapter state, Wi-Fi network, and airplane mode. Use ipconfig /all to inspect configuration and nslookup to test name resolution. Microsoft also documents DHCP renewal and TCP/IP or Winsock resets, but those changes should follow the basic checks and a record of current settings. For advanced diagnosis, its guidance covers pktmon, netsh trace, and packet captures; see TCP/IP connectivity issues troubleshooting – Windows Client and Diagnose Packet Loss.
macOS
Check the Wi-Fi connection, renew the address or restart the Mac, verify date and time, and check for VPN or security software that handles network traffic. Apple also recommends checking router firmware, trying another network, and using Wireless Diagnostics or Wi-Fi Recommendations where available. Wi-Fi Recommendations may not be available for personal hotspots or some enterprise security networks. If macOS needs an update and the current network is unusable, Apple suggests using another working network if possible. The steps are in Apple’s Wi-Fi troubleshooting guidance.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Linux and other systems
Use the operating system’s own interface and IP-configuration tools to inspect the active connection, gateway, and DNS settings. Use traceroute or MTR if installed and useful for the symptom. Linux distributions differ in network managers and command availability, so do not assume Windows commands or a particular Linux configuration tool applies.
Best Value
- Multifunctional Network Cable Tester: TESMEN TLP-123A Supports RJ45 and RJ11, enabling rapid detection of line connectivity, short circuits, open circuits, miswiring, and cable shielding status. An essential tool for troubleshooting line faults and network maintenance, it effectively boosts your work efficiency
- Convenient and Efficient: Featuring one-button operation and a test speed adjustment gear on the main control unit for enhanced flexibility. Clear LED indicators provide intuitive test result displays, making it easy for both professionals and home users to operate
- Portable and Durable: Compact and lightweight design for easy portability. Constructed with high-quality plastic housing for robust structure, ensuring both durability and stability. Ideal for home wiring, IT equipment setup, electrical maintenance, and LAN DIY projects
- Detachable design: The main control unit and remote unit can be separated and used independently, allowing you to test both ends of long cables. This makes it ideal for wall-mounted ports, long-distance cabling, or structured cabling systems, perfect for homes, offices, or professional IT environments
- What you will get: 1 * TLP-123A Network Cable Tester, 1 * user manual, 2 * AAA batteries
7. Escalate with a reproducible record
If the fault persists, collect evidence while reproducing it rather than relying on a later recollection. A packet capture or platform trace can help distinguish where traffic stops or whether a reset comes from the endpoint. Microsoft explains that simultaneous source-side and destination-side traces can reveal whether a packet disappears along the path or a reset originates at an endpoint in its Windows TCP/IP connectivity troubleshooting guidance.
Give the network administrator, application vendor, or ISP the exact timestamps, destination name or IP, port, error message, whether the issue is intermittent, and the results of the gateway, IP, DNS, port, and route tests. This lets support compare observations rather than treating a green icon, a single ping timeout, or one missing traceroute hop as a definitive diagnosis.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitches
