How to Configure Windows 11 Firewall for SQL Server

Windows Firewall’s default function is blocking unauthorized connections to protect your system; therefore, configuring it properly on Windows 11 is vital, especially when setting up SQL Server for remote access.

When configuring the SQL Server for remote access, you must allow certain ports and programs through the firewall to ensure clients can connect to the database securely.

Before we begin, make sure you have administrative rights on the Windows server where the SQL server is installed. Furthermore, ensure that the SQL server is installed and configured correctly.

How can I configure Windows 11 Firewall for SQL Server?

1. Create inbound rules for the SQL server ports

1. Press the Windows key, type control panel in the search box, and click Open.  
2. Select Category for View by and click System and Security.
3. Next, click Windows Defender Firewall. 
4. From the left pane, click the Advanced settings link.
5. On the Windows Defender Firewall with Advanced Security window, select the Inbound Rules option from the left pane and click New Rule from the Actions column.
6. On the New Inbound Rule window, select Port and click Next.
7. Choose TCP and for Specific local ports, enter 1433, then click Next.
8. Select the Allow the connection option and click Next.
9. Place a checkmark next to Domain, Private, and Public, then click Next.
10. Name the rule, add a description (optional) and click Finish.

Once done, you have to add the port SQL uses for UDP as well, follow these steps:

1. On the Windows Defender Firewall with Advanced Security window, select the Inbound Rules option from the left pane and click New Rule from the Actions column.
2. On the New Inbound Rule window, select Port and click Next.
3. Choose UDP and for Specific local ports, enter 1434, then click Next.
4. Select the Allow the connection option and click Next.
5. Place a checkmark next to Domain, Private and Public, then click Next.
6. Name the rule, add a description (optional) and click Finish.

2. Allow the SQL Server applications in the Firewall

1. Press the Windows key, type control panel in the search box, and click Open.  
2. Select Category for View by and click System and Security.
3. Next, click Windows Defender Firewall. 
4. Click the Allow an app or feature through Windows Defender Firewall link from the left pane.
5. On the Allowed apps window, you will see Allow another app button. If it is greyed out, click the Change settings button to enable it
6. Now, click the Allow another app button.
7. Click the Browse button.
8. Once you locate the sqlbrowser.exe file. This is the default location of the folder, navigate after replacing C with the system drive letter on your device: C:\Program Files (x86)\Microsoft SQL Server\90\Shared
9. Click the Add button