Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
In Windows 10, open Start → Settings → Update & Security → Windows Security → Firewall & network protection, choose the network profile, then switch Microsoft Defender Firewall on or off. Keep it on in normal use; if one app is blocked, allow that app rather than disabling the firewall. Windows 10 standard support ended on October 14, 2025, so a firewall does not replace moving to a supported Windows release. Microsoft’s Windows 10 support notice explains the end date.
What the firewall does—and what it does not do
Microsoft Defender Firewall filters network traffic and can allow or restrict connections based on details such as IP addresses, ports, and application paths. It is a network-protection layer, separate from Microsoft Defender Antivirus, which scans for malware. Turning the firewall off does not itself switch off antivirus scanning or Windows Security as a whole. The firewall’s settings are in Firewall & network protection, not Virus & threat protection. Microsoft’s firewall guide and its antivirus FAQ distinguish these components.
Turn Microsoft Defender Firewall on or off in Windows Security
- Select Start, then open Settings.
- Select Update & Security, then Windows Security.
- Select Firewall & network protection.
- Choose the profile you want to configure: Domain network, Private network, or Public network.
- Under Microsoft Defender Firewall, switch the setting to On or Off. Approve an administrator or User Account Control prompt if Windows displays one.
Windows shows settings for all three profiles, and each can be configured separately. The profile names describe network trust: Domain is for organization-managed networks, Private for networks you trust, such as home, and Public for untrusted places such as cafés, hotels, airports, or libraries. Keep the firewall on for all profiles, particularly Public. Do not change a network from Public to Private just to make an app work; that changes its trust and discovery behavior. These labels and controls are described in Microsoft’s Windows Security instructions.
Switching the firewall off is best limited to a short, specific troubleshooting test. While it is off, the device is more vulnerable to unwanted network access. Test only the connection you are investigating, then turn the firewall back on. If the problem persists with the firewall off, that does not prove the firewall was the cause; check the troubleshooting section below.
#1 Best Overall
Allow a blocked app instead of turning off the firewall
- Open Windows Security → Firewall & network protection.
- Select Allow an app through firewall.
- Select Change settings. Approve the administrator prompt if needed.
- Select the checkbox beside the app. If it is not listed, select Allow another app and browse to its executable.
- Choose the appropriate network scope—Private, Public, or both—then select OK.
Allow only an app you recognize and trust. Microsoft considers an app exception generally less risky than opening a port: an exception can be associated with a specific app, while a port rule permits traffic through that port until the rule is removed. Microsoft explains the risks of allowing apps through Windows Firewall.
If an app still cannot connect, use Advanced settings to investigate a narrowly scoped inbound or outbound rule rather than opening a broad port without understanding the need. A rule should be limited to the required app, traffic direction, profile, and port where possible.
Check firewall status with PowerShell
Open PowerShell as an administrator to check or change firewall profiles. This status command reports whether each profile is enabled:
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #2
- 15.6" diagonal, HD (1366 x 768), micro-edge, BrightView, 220 nits, 45% NTSC.
Get-NetFirewallProfile | Select-Object Name, EnabledTo display additional configured profile settings, use:
Get-NetFirewallProfile | Format-Table Name, Enabled, DefaultInboundAction, DefaultOutboundActionEnable all profiles:
Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled TrueDisable all profiles:
Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled FalseTo change just one, specify that profile, for example:
Set-NetFirewallProfile -Profile Public -Enabled TrueUse -Enabled False to turn that profile off. Changing only the active profile does not change the others; a laptop may connect later using a profile with a different setting. Microsoft documents the status cmdlet in Get-NetFirewallProfile and the enable setting in Set-NetFirewallProfile.
Rank #3
- 10th Generation Intel Core i5-1035G1 processor
- 12GB system memory for full-power multitasking
- 256GB Solid State Drive
- 15.6" Micro-edge touchscreen display
Check or change the firewall from Command Prompt
Open Command Prompt as an administrator. To check the state of all profiles:
Free tools Windows power users keep installed
One-click scans. No signup required.
netsh advfirewall show allprofiles stateEnable or disable every profile:
netsh advfirewall set allprofiles state onnetsh advfirewall set allprofiles state offTo change only the current profile, use currentprofile instead of allprofiles:
netsh advfirewall set currentprofile state onnetsh advfirewall set currentprofile state offYou can also name a profile directly:
netsh advfirewall set publicprofile state on
netsh advfirewall set privateprofile state on
netsh advfirewall set domainprofile state onReplace on with off to disable the named profile. Use allprofiles only when you intend the change to apply broadly. Microsoft documents these commands and status checks in its netsh advfirewall reference.
Rank #4
- Latitude 7480 Laptop 14"
- Intel Core i7 6th Gen i7-6600U -Core Processor 2.6GHz (3.4GHz With Turbo Boost)
- 256 GB SSD Hard Drive & 16GB Memory
- 1920x1080 FHD resolution Non-Touch with Webcam and an integrated graphics chip
- Wireless Wifi & Bluetooth
Understand “Block all incoming connections”
This option is not the same as turning the firewall off. With the firewall off, protection is disabled for the selected profile. With Block all incoming connections enabled, the firewall remains on but blocks incoming connections even for apps on the allowed list. That can disrupt apps and services that need incoming traffic. Microsoft describes this option and its effect.
Restore the default firewall settings
If a custom rule or setting is causing trouble, open Windows Security → Firewall & network protection and select Restore firewalls to default, then confirm. This can undo changes that are interfering with apps or networking; on managed devices, organization policies may be applied again.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchFor a command-line reset, first export a backup if the computer has custom rules you may need:
Best Value
netsh advfirewall export "%USERPROFILE%Desktopfirewall-backup.wfw"Then run this in an elevated Command Prompt:
netsh advfirewall resetThe reset returns Windows Defender Firewall with Advanced Security policies to defaults and may remove or reset custom rules. Microsoft documents reset and export in the netsh advfirewall reference; the Windows Security reset option is covered in Microsoft’s firewall guide.
Troubleshoot a missing toggle or a problem that remains
The setting is unavailable or keeps reverting
- Work or school device: An administrator may manage the setting through policy or device-management software. Contact the organization’s IT administrator; do not try to bypass its controls. Microsoft notes that policy can prevent users from changing firewall settings in its firewall instructions.
- Insufficient permissions: Firewall-wide changes require administrator approval. Use an administrator account or ask an administrator to make the change.
- Third-party security suite: Check its firewall or network-protection controls and consult the vendor. A third-party antivirus may affect Microsoft Defender Antivirus behavior, but that alone does not establish that it has disabled Microsoft Defender Firewall. See Microsoft’s antivirus FAQ.
- Unexpectedly disabled protection: Review Windows Security notifications and run a Microsoft Defender scan rather than leaving the firewall off while investigating.
- Different Windows edition or build: Labels can vary in older Windows 10 builds, and Windows 10 in S mode may expose fewer options. Microsoft describes Windows Security availability in Help protect my device with Windows Security.
The app still fails when the firewall is off
Re-enable the firewall. The cause may instead be a router or modem rule, DNS or general connectivity, VPN or proxy settings, the app’s permissions or server availability, antivirus or endpoint-security controls, or a Windows service or driver. Troubleshoot the app and network, then use a specific allowed-app exception or a narrowly scoped firewall rule if the firewall is confirmed to be blocking required traffic.
Check that you changed the right Windows Security control
Firewall & network protection controls network filtering. Virus & threat protection contains antivirus settings such as real-time protection. Changing the latter is not a way to enable or disable the firewall.
Do not stop the firewall service
Do not use the Services console to stop the Windows Defender Firewall service as a workaround. Microsoft’s command-line guidance says to use supported firewall configuration commands rather than stopping the service when a firewall change is required.
Windows 10 support status
Microsoft ended standard Windows 10 support on October 14, 2025. As of September 26, 2026, a normal installation no longer receives free Windows Update security fixes or technical support unless it is covered by a relevant paid or organizational support arrangement. Keeping the firewall on remains sensible, but it does not make an unsupported operating system fully secure. Plan to move to a supported Windows release; see Microsoft’s Windows 10 support notice.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
