Your Windows Firewall is one of the first lines of defence between your computer and the internet. But simply having it installed isn’t enough — you need to confirm it’s actively running and correctly configured to block unauthorized traffic. Many businesses and home users are shocked to discover their firewall was silently disabled after a software update or a conflicting program install.

In this guide, the team at Cloud Quad Ca walks you through every method — from basic GUI checks to PowerShell commands — to verify your Windows Firewall status with confidence.

1. Check Windows Firewall Status via Control Panel

The simplest starting point is the Control Panel interface — no technical knowledge required.

1. Press Windows Key + R, type control, and press Enter.
2. Navigate to System and Security → Windows Defender Firewall.
3. Check both Private networks and Guest or public networks sections.
4. A green shield with “Windows Defender Firewall is on” means it’s active. A red shield means it’s disabled.

If the firewall is off, click “Turn Windows Defender Firewall on or off” on the left panel and enable it for all network types.

2. Verify Firewall Status Using PowerShell

PowerShell gives you the most precise and scriptable view of your firewall state across all three profiles: Domain, Private, and Public.

This returns output for all three profiles. You want to see Enabled: True for every profile. The DefaultInboundAction should be Block, and DefaultOutboundAction should be Allow for standard configurations.

3. Check Using Command Prompt (netsh)

For users comfortable with the command line, netsh is a reliable tool:

Look for State ON under each profile. If any shows State OFF, re-enable it immediately — especially the Public profile, which protects you on coffee shop Wi-Fi and other untrusted networks.

4. Review Inbound and Outbound Rules

Having the firewall “on” means little if it has permissive, misconfigured, or malicious rules. Here’s how to audit them:

1. Search “Windows Defender Firewall with Advanced Security” in the Start menu.
2. Click Inbound Rules. Look for rules with a red X or rules that say “Allow” for ALL programs on ANY port — these are red flags.
3. Repeat for Outbound Rules.
4. Disable or delete any rules you don’t recognize. When in doubt, consult an IT professional.

5. Enable and Check Windows Firewall Logs

Logs are your window into what the firewall is actually doing. By default, logging is disabled — you need to turn it on:

1. In Windows Defender Firewall with Advanced Security, right-click your profile (Domain/Private/Public) and select Properties.
2. Under the Logging tab, click Customize.
3. Set Log dropped packets and Log successful connections to Yes.
4. Default log path: C:\Windows\System32\LogFiles\Firewall\pfirewall.log

Open the log file in Notepad and look for DROP entries on sensitive ports. Unusual activity — especially repeated drops from foreign IP addresses — may indicate a probing or brute-force attempt.

6. Test Port Blocking with PowerShell

Want to verify the firewall is actually blocking a specific port? Use this command:

Port 3389 is Remote Desktop. If TcpTestSucceeded: False appears and you don’t use RDP, that’s the firewall working correctly. Replace 3389 with any port you want to test.

7. Confirm Group Policy Isn’t Overriding Your Settings

In business environments, Group Policy can silently override local firewall settings — making your manual changes ineffective. Check the effective policy with:

If Group Policy is enforcing firewall settings, coordinate with your IT administrator or a managed IT services provider to ensure policies are correctly configured across your organization.

8. Warning Signs Your Firewall May Be Compromised

9. Best Practices for Keeping Windows Firewall Correctly Configured

Frequently Asked Questions

These are the most common questions we receive about Windows Firewall at Cloud Quad Ca.

Conclusion

Verifying your Windows Firewall status takes just a few minutes — but it can mean the difference between a secure network and a costly breach. Use the GUI for quick checks, PowerShell for accuracy, and the Advanced Security console for rule auditing. Enable logging so you always have visibility into what’s being blocked.

For businesses, a firewall alone isn’t enough. A layered security approach — combining firewall management, endpoint protection, and proactive monitoring — is what separates companies that get breached from those that don’t. That’s exactly what the team at Cloud Quad Ca delivers every day for Canadian organizations.