How to Add Exceptions to the Windows 10 and Windows 11 Firewall

The Windows Firewall helps protect your computer by blocking unwanted traffic and ensuring data security. However, there are times when you may need to allow certain trusted programs or applications through the firewall. In this guide, we will explain how to add exceptions to the Windows 10 and Windows 11 firewall.

Step 1: Open Firewall Settings

To access the firewall settings, follow these steps:

  1. Click “Start” and type “Firewall” in the search bar.
  2. Select “Firewall & Network Protection” from the search results.

Step 2: Go to “Allow an App Through the Firewall”

To add an exception, follow these steps:

  1. In the “Firewall & Network Protection” window, click “Allow an app through the firewall”.
  2. Click the “Change settings” button. You may need to confirm with administrator privileges.

Step 3: Add the Program to the Exception List

Now you can add the application you want to allow:

  1. Find the program in the list. If it’s not listed, click “Add another app…” and locate the executable file on your computer.
  2. Check the boxes for “Private” and/or “Public” networks based on where you want to allow access.
  3. Click “OK” to save the changes.

Step 4: Verify the Exception

To ensure the application is no longer blocked by the firewall:

  • Launch the program and check if it has network access.
  • If it still has issues, verify that you selected the correct network types (private or public) when adding the exception.

How to Remove an Exception from the Windows Firewall

If you no longer need to allow a program, follow these steps:

  1. Go back to “Allow an app through the firewall”.
  2. Find the application in the list and uncheck the boxes next to its name.
  3. Click “OK” to save the changes.

Using Command Prompt to Add Exceptions

You can also use the Command Prompt with administrator rights to add exceptions:

netsh advfirewall firewall add rule name="AppName" dir=in action=allow program="C:\path\to\app.exe" enable=yes

This command creates a rule for incoming connections to allow access for the specified program.