Why the Windows 11 Firewall Stops Working
If you need to know how to fix firewall not working on Windows 11 PC, the root cause is often a disabled service, a corrupted security profile, or a conflict with third-party security software.
Windows Defender Firewall is a core part of Microsoft Defender and Windows Security, so when it fails, your system loses an important layer of network protection.
The good news is that most firewall problems on Windows 11 can be resolved without reinstalling the operating system.
The challenge is identifying whether the issue comes from settings, services, Group Policy, registry changes, or another app overriding Windows security controls.
Check Whether the Firewall Is Actually Turned Off
Start with the simplest explanation: the firewall may be disabled for one or more network profiles.
Windows 11 separates firewall settings for domain, private, and public networks, so a setting can look enabled in one profile and disabled in another.
- Open Settings.
- Go to Privacy & security > Windows Security.
- Select Firewall & network protection.
- Review each profile: Domain network, Private network, and Public network.
If any profile shows the firewall as off, turn it back on.
For home and small office systems, the private and public profiles matter most because they control protection on Wi-Fi, Ethernet, and hotspot connections.
Run the Built-in Windows Security Troubleshooting Steps
Windows Security may report that the firewall is managed by your organization, not responding, or unavailable.
In that case, use the built-in repair actions before moving to deeper fixes.
- Open Windows Security.
- Go to Firewall & network protection.
- Check for warning banners, disabled notifications, or red status indicators.
- Open Virus & threat protection and confirm Microsoft Defender is active.
Some malware and unwanted applications alter Windows Security settings.
If the interface behaves normally but changes do not stick, that is often a sign of policy control, registry tampering, or another endpoint protection product taking over.
Restart the Required Services
Windows Defender Firewall depends on services running in the background.
If those services stop, the firewall may fail to load or turn itself off.
Use the Services console to check these items:
- Windows Defender Firewall
- Base Filtering Engine
- Security Center
To verify them:
- Press Win + R, type services.msc, and press Enter.
- Find each service in the list.
- Make sure the startup type is not disabled.
- Restart any service that is stopped.
Base Filtering Engine is especially important because it supports Windows Filtering Platform operations.
If it is not running, firewall rules may not apply correctly.
Use the Windows Defender Firewall Reset Option
When custom rules or damaged settings prevent the firewall from working, a reset can restore the default configuration.
This is one of the most effective fixes when you are learning how to fix firewall not working on Windows 11 PC.
To reset it:
- Open Windows Security.
- Go to Firewall & network protection.
- Select Restore firewalls to default.
This removes custom inbound and outbound rules and returns the firewall to Microsoft’s default state.
It is useful if a VPN, game launcher, printer utility, or manual rule set has broken normal behavior.
If you rely on custom network rules, export or document them first if possible.
Repair Windows System Files
Corrupted system files can prevent security components from functioning correctly.
If the firewall UI opens but settings do not apply, run system repair tools from an elevated Command Prompt or Windows Terminal.
Use these commands in order:
DISM /Online /Cleanup-Image /RestoreHealth sfc /scannow
DISM repairs the Windows image, while System File Checker scans for missing or damaged protected files.
After the scan completes, restart the computer and test the firewall again.
Remove Conflicting Third-Party Security Software
Antivirus suites and internet security products often include their own firewall components.
Products from vendors such as Norton, McAfee, Bitdefender, Kaspersky, ESET, Avast, and Trend Micro may disable Windows Defender Firewall or replace it with a separate packet-filtering engine.
If you recently installed or updated security software, check whether it includes:
- A third-party firewall
- Network protection or intrusion prevention
- VPN or web filtering modules
Temporarily disable the third-party firewall or fully uninstall the suite to see whether Windows Defender Firewall starts working again.
On Windows 11, two active firewall systems can create conflicts, blocked traffic, or repeated security warnings.
Inspect Group Policy and Registry-Based Restrictions
On managed devices, Group Policy can control firewall behavior across the computer.
Even on a personal PC, registry edits or optimization tools may disable Windows firewall features.
If your PC is running Windows 11 Pro, Enterprise, or Education, open the Local Group Policy Editor and review security policies related to Windows Defender Firewall.
Look for settings that force profiles off, block rule changes, or disable local policy merge.
Registry changes are more risky, so only edit them if you understand the effect.
Common repair paths include restoring default values for firewall policy entries and removing entries created by optimization software or malware cleanup tools.
If a device is joined to Azure Active Directory, Active Directory, or Intune, policy changes may be re-applied automatically by your administrator.
Check for Malware or Unauthorized Changes
Persistent firewall failure can be a sign that malicious software has tampered with Windows security components.
Some threats target firewall rules to allow remote access, suppress alerts, or weaken network defenses.
Run a full scan with Microsoft Defender and, if possible, perform an offline scan.
Also review installed programs for unknown remote administration tools, browser extensions, VPN clients, or network utilities you did not intentionally install.
Signs of malware-related firewall issues include:
- Settings reverting after restart
- Security Center reporting false status changes
- Unexpected inbound rule additions
- Unable to open Windows Security pages
Reset the Network Stack If Connectivity Is Also Broken
If the firewall problem appears alongside general network issues, the network stack may need repair.
This does not directly replace firewall settings, but it can resolve broken adapters, filters, and catalog corruption that affect network security behavior.
Go to Settings > Network & internet > Advanced network settings > Network reset.
You can also use command-line tools like netsh to reset Winsock and IP components if you are comfortable with advanced troubleshooting.
After a network reset, reconnect to Wi-Fi or Ethernet, then recheck the firewall profiles in Windows Security.
Confirm Microsoft Defender and Security Center Are Healthy
The firewall depends on broader Windows security health.
If Microsoft Defender Antivirus is turned off permanently, Windows Security may show inconsistent network protection results.
The Security Center service also reports status to the Windows interface, so a failure there can make the firewall appear broken even when the driver layer is functional.
Look for these conditions:
- Real-time protection is enabled
- Security Center service is running
- No enterprise policy blocks local control
- Windows Update is current
Keeping Windows 11 updated matters because Microsoft frequently ships cumulative patches that fix Defender components, networking, and policy handling.
What to Do If the Firewall Still Will Not Work
If none of the above steps restore normal behavior, the problem may be tied to deeper profile corruption, device management policy, or a damaged Windows installation.
At that point, focus on verification before making bigger changes.
- Test with a clean local administrator account.
- Check whether the issue occurs on all network adapters.
- Review Event Viewer logs under Applications and Services Logs for firewall or Defender errors.
- Confirm whether the device is managed by work or school policies.
On a personal PC, an in-place repair install of Windows 11 can preserve files and apps while rebuilding core system components.
That is usually the last resort after service checks, resets, scans, and policy review.
Practical Prevention Tips for Windows 11
Once the firewall is working again, keep it stable by avoiding unnecessary security tweaks and rule editors.
Limit the use of “system optimizer” tools, review third-party antivirus settings after updates, and keep Windows Update enabled.
- Leave Windows Defender Firewall on for all profiles.
- Only create custom rules when you understand the traffic flow.
- Uninstall duplicate firewall software if you do not need it.
- Monitor security notifications instead of suppressing them.
These habits reduce the chance of repeating the same problem and help ensure Windows 11 continues protecting inbound and outbound network traffic.