Windows Firewall and network protection: check it’s on

Windows Firewall is the built-in protection that helps stop unwanted connections to your PC. To check that it’s on, open Windows Security and go to Firewall and network protection, then confirm the firewall is enabled for the network profile you’re actually using. If Windows says a firewall is off or managed by another app, you can usually tell from the same screen whether Windows Defender Firewall is on, off, or being handled elsewhere.

What you are checking before you change anything

Before you touch anything, check one thing: is Windows Firewall on for the network profile your PC is using right now? You do not need to inspect every profile or change advanced rules to answer that.

A quick check like this tells you whether the built-in protection is active on your current connection, such as your home Wi‑Fi. If you use a laptop, the active profile can change when you move between home, work, and public places, so the profile in use matters more than the others.

You only need:

• A Windows PC with Windows Security available
• Permission to open security settings on that PC
• A few minutes to check the current network profile and firewall status

Open Windows Security and find Firewall and network protection

Open the Windows Security app from Start, then go straight to the firewall page.

1. Select the Start button.
2. Type Windows Security.
3. Open the Windows Security app.
4. Select Firewall & network protection.

You should now see the network profiles listed, usually Domain network, Private network, and Public network. The page also shows which one is currently active or connected. If you can’t find the app by search, you can also open Settings and look for Privacy & security or Update & Security, then Windows Security, and open it from there.

Settings > Privacy & security > Windows Security
Settings > Update & Security > Windows Security

Check which network profile is active right now

Windows uses different firewall profiles depending on the kind of network you’re on.

• Domain network is for PCs managed by an organization’s domain, such as a workplace or school network.
• Private network is usually for trusted home or small office networks where you want normal device sharing.
• Public network is for places you do not trust, like coffee shops, airports, or hotel Wi‑Fi.

For most home users, Private network is the profile that matters. If you’re on home Wi‑Fi and Windows says Private network, that’s the one to check. If the active profile is Public, Windows is treating the network as less trusted, which is normal for unfamiliar Wi‑Fi. The screen will usually show which profile is connected or active right now, so match that one with the status you check next.

If you switch from Wi‑Fi to Ethernet, or move to a different network, Windows can treat that connection as a different profile. Check the active one again if your connection changes.

See whether the firewall is on for that profile

On the Firewall & network protection page, select the active profile to open its details. You’re looking for the firewall status on that profile, not just the page title.

A protected profile typically shows that Microsoft Defender Firewall is on, with the switch enabled. If it’s off, you’ll usually see a clear warning or a red or yellow status message telling you that the firewall needs attention. The exact message varies.

Check only the profile you’re using unless you specifically want to review the others too. For example, if your home network is Private, check Private network. If you’re on public Wi‑Fi, check Public network. The goal is to confirm the firewall is protecting the connection you’re actually using right now.

If you want a simple read on the active network, the switch on that profile is the clearest check: on means protection is on for that network, and off means it needs attention.

What the basic firewall settings mean

On the profile page, the settings you’ll usually see are simple and safe to understand.

Microsoft Defender Firewall is the main on/off switch. If it’s on, Windows is filtering inbound network traffic for that profile.

Notify me when Microsoft Defender Firewall blocks a new app controls whether Windows shows a notice when an app is blocked. Leaving this on is usually helpful, because it tells you when a program is trying to use the network.

Allow an app through firewall is where you control whether a specific app may communicate on your network. This is useful for trusted apps, such as a printer utility or a game launcher, but it should be used sparingly. If you do not recognize an app, leave it blocked.

A simple rule works well here: keep the firewall on, keep notifications on if you want prompts, and only allow apps you recognize and trust.

If you’re just checking whether the built-in protection is actually on, these are the only settings you need to look at. You do not need to open more advanced menus to get a useful answer.

When you should leave advanced settings alone

Most home users do not need Advanced settings, Inbound rules, or Restore defaults to confirm protection. Those areas are for specific troubleshooting or for people who already know exactly what they are changing.

Changing inbound rules can block services you rely on, and restoring defaults can undo custom exceptions you may need. Leave these alone unless you have a clear reason.

If you’re only trying to make sure your PC is protected, the standard profile status and the basic on/off switch are enough. You can always come back later if a trusted app stops working and you need to allow it through the firewall.

If Windows says another firewall app is in charge

Sometimes Windows Security will show that firewall settings are managed by another app. That usually means a third-party security suite, such as one from the PC maker or a separate antivirus provider, is controlling firewall protection.

That can be normal if you installed security software that includes its own firewall. In that case, Windows may show Microsoft Defender Firewall as off in its own interface even though another firewall is active.

Check the notifications area, installed apps, or the security app that came with your antivirus package. Open that app and look for its firewall page or protection status. If you did not mean to install another security app, review the installed programs on your PC so you can see what is managing network protection.

If Windows says the firewall is managed by another app, the real check is in that app, not in Windows Security. You do not need to force changes in Windows if another trusted security app is already handling the firewall.

If protection is turned off, turn it back on safely

If the active profile shows the firewall is off, turn it back on for that profile only.

1. On Firewall & network protection, select the active network profile.
2. Find the Microsoft Defender Firewall switch.
3. Turn the switch on.
4. Go back and confirm the status now shows protection is enabled.

If Windows says the setting is managed by another app, turn the firewall on in that app instead of forcing changes in Windows Security. If Windows allows you to switch it on directly, that is the simplest and safest fix. Do not change other options at the same time unless you know why you need them.

If you only use one home network, Private network is usually the profile to check first. If you are on unfamiliar Wi‑Fi, check Public network instead.

How to confirm your PC is protected after the change

You’re done when the active profile shows the firewall is on and there’s no warning about that network profile. In Windows Security, that usually means the profile page shows Microsoft Defender Firewall turned on and the main Firewall & network protection page no longer shows an urgent alert for your current connection.

If you checked your home Wi‑Fi, make sure Private network is the one that looks protected. If you’re on public Wi‑Fi, check Public network instead. Once the active profile shows protection is on, you can stop there.

If the status still looks unclear, return to the active profile and check that specific page again rather than changing unrelated settings.

Conclusion

If you want to keep things simple, check this page any time you join a new network or install new security software. The active profile tells you what matters, and the firewall status tells you whether Windows is still guarding that connection. If something changes later, come back to the same screen before you touch deeper settings. That keeps the check quick and low-risk.

Frequently Asked Questions

Does Windows Firewall slow my PC down?

For most home users, no noticeable slowdown is expected. The firewall works in the background and usually does not affect everyday use in a way you’d see while browsing, streaming, or working.

Does changing from Wi‑Fi to Ethernet matter?

Yes, it can. Windows may treat a different connection as a different network profile, so it’s worth checking `Firewall & network protection` again after you switch from Wi‑Fi to Ethernet or move to a new network.

Do I still need antivirus if Windows Firewall is on?

Yes. The firewall and antivirus do different jobs. The firewall controls network traffic, while antivirus looks for malware and other harmful files or behavior.

Is Public network less safe than Private network?

Public network is stricter by design. It is meant for places you do not fully trust, so Windows limits sharing and keeps the network profile more cautious.