How to Allow an App to Communicate Over the Network in Windows 10

To let a trusted app communicate over a network on Windows 10, add it to the Windows Defender Firewall allowed-apps list and choose which network types it can use. Open Windows Security, go to Firewall & network protection, select Allow an app through firewall, and enable the app for the appropriate network profile. You do not need to turn off the firewall.

Open the allowed-apps list

1. Open the Start menu, type Windows Security, and launch the app.

   

2. Select Firewall & network protection from the navigation pane or the security dashboard.

   

3. Choose Allow an app through firewall. This opens the classic Control Panel list of allowed apps.

   

You can also reach the same list through Control Panel > System and Security > Windows Defender Firewall > Allow an app or feature through Windows Defender Firewall.

Allow an app that is already listed

1. In the Allowed apps window, select Change settings. Approve the User Account Control prompt or enter administrator credentials if Windows asks. Until you do this, the checkboxes may be read-only.

   

2. Find the app by name. The checkbox immediately beside its name enables or disables its firewall exception; the Private and Public columns control the network profiles where that exception applies.

   

3. Select the app and check only the network profile it needs. Click OK to save the change. If you want to revoke access later, return to this list, select Change settings, clear the relevant checkbox, and click OK.

Add an app that is not listed

1. In the Allowed apps window, select Change settings if necessary, then click Allow another app. The Add an app dialog lets you identify a desktop program that is missing from the list.

   

2. Click Browse, open the folder where the trusted program is installed, select its executable file (usually ending in .exe), and click Open. Choose the actual application file, not a shortcut or an unrelated file.

   

3. Back in the Add an app dialog, verify the selected program and choose Add. Find the newly added entry in the allowed-apps list, select the appropriate Private or Public checkbox, and click OK. For example, an app used only on your home network can be allowed on Private while remaining blocked on Public.

   

Choose Private or Public carefully

• Private: Use this for a network you trust, such as your home network. Other devices on that network may be able to discover or connect to your PC, depending on the app and its settings.
• Public: Use this for networks such as guest Wi-Fi at a hotel, airport, or coffee shop. These networks are less trusted, so leave Public unchecked unless the app genuinely needs to accept connections there.

You usually do not need to select both profiles. Grant the narrowest access that supports the app’s intended use. Only allow programs you recognize and obtained from a trustworthy source; if you are unsure why an app needs network access, check its official documentation before changing the firewall.

If the app still cannot connect

• Check the active profile. On the Firewall & network protection page, Windows shows whether the current connection is Domain, Private, or Public. An exception for Private will not apply when the active connection is Public.
• Review incoming-connection blocking. Windows Security has an option called Blocks all incoming connections, including those in the list of allowed apps. When enabled, it overrides the allowed-apps list. Change it only if you understand the security implications and need to permit incoming connections.
• If the controls are unavailable, sign in with an administrator account. On a work or school computer, an organization’s policy may prevent changes; contact your IT administrator rather than trying to bypass the policy.
• Confirm what kind of connection is failing. The allowed-apps exception is mainly used to permit incoming connections through the firewall. Windows Firewall normally allows outbound traffic unless a rule blocks it, so an app that cannot reach a website may have a different issue, such as a proxy, VPN, app setting, or separate security product.

Keep the firewall enabled

Adding a specific app to the allowed list is generally safer than opening a port manually, and it is much safer than disabling Windows Firewall. Remove exceptions that are no longer needed. For more details, read Microsoft’s guidance on the risks of allowing apps through Windows Firewall and its Windows Firewall overview.