How to Configure Windows 11 Firewall for SQL Server

Windows Firewall’s default function is to block unauthorized connections to protect your system; therefore, configuring it properly on Windows 11 is vital, especially when setting up SQL Server for remote access.

When configuring the SQL Server for remote access, you must allow certain ports and programs through the firewall to ensure clients can connect to the database securely.

Before we begin, make sure you have administrative rights on the Windows server where the SQL server is installed. Furthermore, ensure that the SQL server is installed and configured correctly.

How can I configure Windows 11 Firewall for SQL Server?

1. Create inbound rules for the SQL server ports

1.1 Mention the SQL server port

1. Launch the SQL Server Configuration Manager.
2. Go to SQL Server Network Configuration > Protocols for (Instance Name)
3. Right-click TCP/IP and choose Properties.
4. Go to IP Addresses tab, scroll down to find the TCP Port settings. Make sure TCP/IP is enabled. If it is not, right-click it and choose Enable.

1.2 Configure Windows Firewall

1. Press the Windows key, type control panel in the search box, and click Open.  
2. Select Category for View by and click System and Security.
3. Next, click Windows Defender Firewall. 
4. From the left pane, click the Advanced settings link.
5. On the Windows Defender Firewall with Advanced Security window, select the Inbound Rules option from the left pane and click New Rule from the Actions column.
6. On the New Inbound Rule window, select Port and click Next.
7. Choose TCP and for Specific local ports, enter 1433, then click Next.
8. Select the Allow the connection option and click Next.
9. Place a checkmark next to Domain, Private, and Public, then click Next.
10. Name the rule, add a description (optional) and click Finish.

Once done, you have to add the port SQL uses for UDP as well, follow these steps:

1. On the Windows Defender Firewall with Advanced Security window, select the Inbound Rules option from the left pane and click New Rule from the Actions column.
2. On the New Inbound Rule window, select Port and click Next.
3. Choose UDP and for Specific local ports, enter 1434, then click Next.
4. Select the Allow the connection option and click Next.
5. Place a checkmark next to Domain, Private and Public, then click Next.
6. Name the rule, add a description (optional) and click Finish.

1.3 Create a Rule for SQL Server Management Studio (SSMS)

1. Repeat steps from 1.2 to create an inbound rule but instead of Port, choose Program and click Next.
2. On the next page, select This program path and click Browse and locate SSMS executable or enter this path: C:\Program Files (x86)\Microsoft SQL Server Management Studio 18\Common7\IDE\Ssms.exe
3. Now select Allow the connection and click Next.
4. Choose all profiles on the following page, and click Next.
5. Name the rule and click Finish.

2. Allow the SQL Server applications in the Firewall

1. Press the Windows key, type control panel in the search box, and click Open.  
2. Select Category for View by and click System and Security.
3. Next, click Windows Defender Firewall. 
4. Click the Allow an app or feature through Windows Defender Firewall link from the left pane.
5. On the Allowed apps window, you will see Allow another app button. If it is greyed out, click the Change settings button to enable it.
6. Now, click the Allow another app button.
7. Click the Browse button.
8. Once you locate the sqlbrowser.exe file. This is the default location of the folder, navigate after replacing C with the system drive letter on your device: C:\Program Files (x86)\Microsoft SQL Server\90\Shared
9. Click the Add button.
10. Click OK to save the changes.

Now you will have to add SQL Server Application; for that, follow these steps:

1. Open the Allowed apps window using the steps mentioned above, and click the Allow another app button.
2. Click the Browse button.
3. Once you locate the sqlserver.exe file. Here is the default location of the folder, but before navigating to the path, replace C with the system drive letter on your device: C:\Program Files\Microsoft SQL Server\<Version and Edition>\MSSQL\Binn
4. Click the Add button.
5. Click OK to complete.

To conclude, configuring the Windows 11 firewall for the SQL server is important for securing your database when enabling remote access. Remember to review your firewall settings and SQL security regularly according to your changing needs.

If you need help securing your SQL server database, here are some tips you can follow; read this guide to learn more. Also, if you are looking for a way to repair your corrupted database in an SQL server, we have a separate guide to help you.

If you have any suggestions or things to keep in mind related to setting up a Windows 11 Firewall for the SQL server, feel free to share them with our readers in the comments section below.