Turn on Windows Firewall for public networks

Purpose

Show registry keys (1)

• HKLM\Software\Policies\Microsoft\WindowsFirewall\PublicProfile\EnableFirewall

This value enables Windows Firewall for network connections that Windows has assigned to the public network profile. EnableFirewall is a DWORD value; a value of 1 turns on firewall and advanced security enforcement for that profile.

When the firewall is enabled, network traffic is allowed or blocked according to the firewall rules and default actions effective for the public profile. This value does not itself define individual rules or the default actions for inbound and outbound connections.

Notes

Additional effects

Enabling the firewall also permits enforcement of connection security and IPsec settings that apply to the public profile. It does not automatically enable any particular IPsec or additional firewall rules.

Security

Traffic filtering reduces the device's exposure to other systems on public or unidentified networks. The connections actually blocked depend on the effective rules, exceptions, and default actions for the public profile.

A value of 1 therefore does not block all inbound or outbound traffic. Allow rules can still permit connections.

Possible side effects

Applications, services, or shares might become unreachable on public networks if no effective rule allows their required traffic. Outbound connections can also be affected when the rules or default actions for the public profile block them.

Notes

The setting is computer-wide, but it applies to a network connection only while the public profile is active for that connection. It does not enable or disable the domain or private profiles.

EnableFirewall accepts 0 and 1: 0 disables firewall enforcement for the profile, while 1 enables it.

Microsoft documentation

Microsoft Learn: Turn on Windows Firewall for public networks

Microsoft Learn: Enable Firewall registry value

See also

• Entry in the reference