How to Configure Ports in Windows 11 Firewall

Configuring Windows Defender Firewall rules allows you to manage network traffic by opening or blocking specific incoming (inbound) and outgoing (outbound) ports on Windows 11. This guide walks you through the step-by-step process of accessing the Advanced Security settings, creating custom rules for TCP or UDP ports, and managing these rules to support applications, hosting servers, or network security needs.

Step 1: Open Windows Defender Firewall with Advanced Security

  1. Press Windows Key + R to open the Run dialog box.
  2. Type wf.msc and press Enter (or click OK).
  3. The Windows Defender Firewall with Advanced Security window will appear.

Step 2: Create an Inbound Rule (Incoming Ports)

Inbound rules control traffic coming into your computer from the local network or the internet.

  1. In the left navigation pane, click on Inbound Rules.
  2. In the right Actions pane, click New Rule… to launch the wizard.
  3. Rule Type: Select Port and click Next.
  4. Protocol and Ports:
    • Choose whether the rule applies to TCP or UDP.
    • Select Specific local ports and enter the port number (e.g., 80, 443, or a range like 8000-8080). Click Next.
  5. Action: Select Allow the connection (or Block the connection if your goal is to restrict traffic) and click Next.
  6. Profile: Choose when the rule applies:
    • Domain: For corporate networks joined to an Active Directory domain.
    • Private: For trusted home or work networks.
    • Public: For untrusted networks (e.g., coffee shops, public Wi-Fi).
    • Click Next.
  7. Name: Provide a recognizable Name (e.g., “Web Server Port 80”) and an optional description, then click Finish.

Step 3: Create an Outbound Rule (Outgoing Ports)

Outbound rules control traffic sent from your computer to external networks or servers.

  1. In the left navigation pane, click on Outbound Rules.
  2. In the right Actions pane, click New Rule….
  3. Rule Type: Select Port and click Next.
  4. Protocol and Ports:
    • Select TCP or UDP.
    • Select Specific remote ports and enter the designated port numbers. Click Next.
  5. Action: Choose Allow the connection or Block the connection, then click Next.
  6. Profile: Check the network profiles (Domain, Private, Public) where this rule should apply, then click Next.
  7. Name: Enter a clear Name and description for the outbound rule, then click Finish.

Managing and Modifying Existing Rules