How to Block a Program in a Firewall in 6 Steps (Easy Tutorial)

Enterprise Storage Forum content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More.

A firewall protects computer systems from unwanted contact initiated by other computers connected over the internet or a network by blocking harmful programs based on user-defined rules. Individual services and applications can be granted access to pass through the firewall. This article explains how to block a program in a firewall to help you protect your system from unwanted access.

Steps to Block a Program in a Firewall

This tutorial on how to block a program in a firewall applies to computers running Microsoft Windows 11 operating system. Some details might vary slightly for Windows 10 or older versions, but the procedure is essentially the same.

1. Open the Settings for Windows Defender Firewall with Advanced Security 

Use one of the following methods to open the Windows Defender Firewall with Advanced Security. 

Method 1

  • Press the Windows key and the R key at the same type to open the Run dialog box. 
  • Type “WF.msc” into the box.
  • Hit the “OK” button or Enter.

Method 2

  • Press the Windows key to open the search function.
  • Start typing “Windows Defender Firewall” and select the application when it appears.
  • From the Windows Defender Firewall screen, select Advanced Settings in the left sidebar.

Step 1: Open Windows Defender Firewall with Advanced settings.

2. Select Inbound Rules or Outbound Rules

Choose whether you want to set an inbound rule allowing access to your computer for an external application or program, or an outbound rule allowing an application or program installed on your computer external access through the firewall. 

The program-blocking process is similar for both types of rules—for this example, we’ll choose Outbound Rules to block a program in the firewall. 

Select the appropriate option from the left sidebar of the Windows Defender Firewall with Advanced Security screen. A list of outbound rules appears detailing their names, groups, profiles, and status (enabled/disabled).

Step 2: Select Inbound or Outbound rules.

3. Create a New Rule

In the sidebar to the right of the list of existing outbound rules, click the “New Rule…” option. The New Outbound Rule Wizard opens, presenting four options for type of outbound rule: 

  • Program
  • Port
  • Predefined
  • Custom
Step 3: Click the New Rule option.

4. Select “Program” 

Select Program  and click the “Next>” button. The Program dialog box opens to ask whether you want this rule to apply to all programs or just one specific program.

Step 4a: Select the Program option.

 

To block a specific program, select the “This program path” option and click the “Browse…” button to open the program folder.

Locate and select the executable file (.exe) for the program you want to block.

Click the “Next>” button.

Step 4b: Select the Program option.

5. Block the Connection 

The Action window of the New Outbound Rule Wizard opens, presenting three options: 

  • Allow the connection. This includes connections that are protected with IPsec and well as those that are not.
  • Allow the connection if it is secure. This includes only connections that have been authenticated by using IPsec. Connections will be secured using the settings in IPsec properties and rules in the Connection Security Rule node. 
  • Block the connection. This blocks the connection.

Select “Block the connection” and click the “Next>” button.

Step 5: Select the Block the Connection option.

6. Specify the Profiles

The Profile window of the New Outbound Rule Wizard opens, presenting three options: 

  • Domain–Applies when a computer is connected to its corporate domain.
  • Private–Applies when a computer is connected to a private network location, such as a home or workplace.
  • Public–Applies when a computer is connected to a public network location.

Specify when the rule will apply and click the “Next>” button.

Step 6a: Specify the Profiles and Name.

7. Assign the Rule a Name and Description

The Name window of the New Outbound Rule Wizard opens. In the empty fields, assign a name and description for the rule. Click the “Finish” button.

Step 6b: Specify the Profiles and Name.

 

The Windows Defender Firewall with Advanced Security box lists all the existing outbound rules. Confirm that your new rule is included in the list. The program is now blocked; to unblock it, simply select and delete the rule.

You can unblock other programs the same way—to find them, sort the list by name, profile, state (enabled/disabled), or group and click Disable Rule in the right sidebar. You can also perform cut, copy, and delete rules or view their properties.

Step 6c: Specify the Profiles and Name.

 

Are These Steps the Same for Other Firewalls?

Firewalls are essential for controlling traffic in networks and ensuring protection against hackers, malware, and ransomware attacks. Most computer operating systems (OS) include built-in firewalls, and many cybersecurity vendors offer third-party firewalls with context-aware network security features that integrate with other services. 

The process involved in blocking a program in a firewall can vary based on the firewall and operating system, but the steps are similar to those modeled here. 

Bottom Line: Optimize Your Firewall

While the steps covered here apply to blocking a program in a firewall for an individual computer, enterprise-scale firewalls can be deployed to protect entire networks of computers. These enterprise-class products perform the same functions as an individual firewall by using rules to determine whether to allow access to programs and apps.

Firewalls are a critical part of network security, blocking inbound access for harmful programs and applications and preventing outbound access for installed applications and services. When configured properly and used appropriately, a firewall can safeguard your data against today’s threats.

Learn more about where to place firewalls in your network.

Al Mahmud Al Mamun
Al Mahmud Al Mamun
Al Mahmud Al Mamun is a writer for TechnologyAdvice. He earned his B.S. in computer science and engineering from Prime University, Bangladesh. He attained more than 25 diploma courses and 100 certificate courses. His expertise and research interests include artificial intelligence (AI), artificial neural networks, and convolutional neural networks.

Get the Free Newsletter!

Subscribe to Cloud Insider for top news, trends, and analysis.

Latest Articles

15 Software Defined Storage Best Practices

Software Defined Storage (SDS) enables the use of commodity storage hardware. Learn 15 best practices for SDS implementation.

What is Fibre Channel over Ethernet (FCoE)?

Fibre Channel Over Ethernet (FCoE) is the encapsulation and transmission of Fibre Channel (FC) frames over enhanced Ethernet networks, combining the advantages of Ethernet...

9 Types of Computer Memory Defined (With Use Cases)

Computer memory is a term for all of the types of data storage technology that a computer may use. Learn more about the X types of computer memory.