VPN got blocked by Windows Firewall? Here’s how to fix it

Deputy Editor

September 9, 2019

Millions of Internet users across the globe are using VPNs to encrypt and secure their data while keeping their browsing anonymous online.

VPNs also help users bypass geo-restrictions and unblock content from sites they otherwise wouldn’t be able to access, while anonymous.

However, many of these users face difficulties when trying to install and/or launch their VPN client on Windows, and usually, it is blocked by a firewall or other security software in place.

If you experience your VPN block issues by Windows Firewall, in most cases it is a default setting, but there are ways to get around it and get connected again. Use the solutions below to do this.

What can I do if my VPN got blocked by Windows Firewall?

Add an exclusion
Change Allow app settings
Change adapter settings
Create a new inbound rule
Enable rule for PPTP
Open ports
Turn off SSL monitoring
Change your VPN

1. Add an exclusion

Open Windows Defender Security Center
Go to Virus & Threat protection settings
Select Exclusions
Select Add or remove exclusions
Select Add an exclusion and add your VPN client software

Note: Most VPN clients use ports 500 and 4500 UDP, and port 1723 for TCP. If these don’t work, add a new rule to allow them in Windows Firewall Advanced settings.

Need to check if your firewall is blocking the VPN? Follow these steps to find out.

2. Change Allow app settings

Open Control Panel

Select System & Security

Click Windows Defender Firewall

On the left pane, click Allow an app or a feature through Windows Firewall. A window in which you can allow or prevent any app will display

Click Change Settings

Check for your VPN from the list of programs and apps you want to allow through your firewall
Check Public or Private to select the network type on which you want the VPN to run
If you cannot find your VPN, click Allow another app
Select your VPN and then click Add, then click OK

You can’t open Control Panel? Take a look at this step-by-step guide to find a solution.

3. Change adapter settings

Open Control Panel and select Network & Internet

Select Network and Sharing Center

On the left pane, click Change adapter settings
Click File
Select New incoming connection
Select all users you want to access your VPN connection
Check Through the Internet
Click Next
From the list of protocols, mark the Internet protocols you want your VPN to connect to
Double click Internet Protocol Version 4 (TCP/IPv4)
Go to Control Panel again and select Windows Firewall

Click Advanced Settings

Click Inbound Rules>Actions

Click New Rule

In the Wizard, choose Port and click Next. Most VPN clients use ports 500 and 4500 UDP, and port 1723 for TCP. You can use TCP and insert 1723 in Specific remote ports field

Click Next
Select Allow the connection and click Next

When asked ‘When does this rule apply?’ select all options (Domain, Private, Public) and apply the rule to all
Choose a name and description to fill the Name and Description
Click Finish

4. Create a new inbound rule

Open Windows firewall with advanced security
Click inbound rules on the left
Click New rule on the right
Click Custom rule
Specify programs or leave as all programs
Specify ports or leave as all ports
Click “These IP addresses” under remote IP
Click “This IP address range”
Type From “10.8.0.1” To “10.8.0.254”
Close and click Next, then leave as “Allow the connection”
Apply to all profiles
Name your profile and click Finish

You should then be able to connect to your home devices through your VPN

Your VPN is not working after a Windows 10 update? Check out these solutions

5. Enable rule for PPTP

If your VPN requires PPTP, do the following:

Open Control Panel
Select Windows Firewall
Select Advanced Settings

Search for the ‘Routing and Remote Access‘ under Inbound Rules and Outbound Rules. For Inbound Rules: right-click ‘Routing and Remote Access (PPTP-In)’, select Enable Rule. For Outbound Rules: right-click ‘Routing and Remote Access (PPTP-Out)’, select Enable Rule.

6. Open ports

In order to allow your VPN traffic to pass through the firewall, open the following ports:

IP Protocol=TCP, TCP Port number=1723 – used by PPTP control path
IP Protocol=GRE (value 47) – used by PPTP data path
Make sure that these ports are allowed on Windows Firewall with corresponding network profile.
DO NOT configure RRAS static filters if you are running on the same server RRAS based NAT router functionality. This is because RRAS static filters are stateless and NAT translation requires a stateful edge firewall like ISA firewall.
In general, VPN error 807 indicates that the network connection between your computer and the VPN server was interrupted. This also can be caused by a problem in the VPN transmission and is commonly the result of internet latency or simply that your VPN server has reached capacity. Try to reconnect to the VPN server.

Need more info on firewall ports in Windows 10? Follow this guide and learn how to do it

7. Turn off SSL monitoring

Depending on your firewall or security software, there are steps to take to fix VPN blocked by Windows firewall. Here’s what to do if you’re using NOD32 or Kaspersky:

NOD32:

Select Setup
Select Advanced Setup
Select Antivirus and antispyware
Select Web access protection
Select HTTP, HTTPS > HTTP scanner setup, and set HTTPS filtering mode to Do not use HTTPS protocol checking.

Note: If HTTPS filtering mode is greyed out, you must first set Antivirus and antispyware > Protocol filtering > SSL to Always scan SSL protocol. Restore this to its previous setting after changing HTTPS filtering mode.

Kaspersky

Select Settings
Select Traffic Monitoring panel
Select Port Settings or settings
Select Network
Select Port Settings and uncheck the box for port 443/SSL

8. Change your VPN

You can also change your VPN and see if it resolves the issue. A great VPN you can use is hide.me.

hide.me‘s servers are located all around the world, and they support high data speeds, which makes it a fast VPN for Windows operating system, besides its powerful features and performance.

It is a favorite among the best VPN software for laptops as it not only protects your privacy on a multi-platform privacy solution but also offers reliability.

Not only is it very efficient at encrypting your data, but it is also easy to set up and use. More so, this simplicity goes hand in hand with the 10-device coverage that a single subscription will give you so that even your less tech-savvy friends and family members can enjoy private browsing.

Don’t waste any more time and check out one of the most feature-packed VPNs out there.

Check now hide.me

Need more options? Check out this list with the best VPNs available today.

Any luck fixing VPN blocked by Windows firewall using the solutions above? Share with us by leaving a comment in the section below.

Also, leave there any other suggestions or questions that you may have and we’ll be sure to check them out.

RELATED STORIES TO CHECK OUT:

Editor’s Note: This post was originally published in April 2018 and has been since completely revamped and updated for freshness, accuracy, and comprehensiveness.