How to Fix Windows Firewall That Won’t Turn On in Windows 11

Windows Firewall is one of the most important security features in Windows 11. It protects your PC from unauthorized access, suspicious incoming traffic, and apps that try to connect to unsafe networks. But sometimes, Windows Firewall refuses to turn on. You might see messages like “Windows Defender Firewall is not using the recommended settings,” “Windows Firewall can’t change some of your settings,” or “Windows Firewall is turned off” and won’t enable no matter what you click.

This issue usually happens due to corrupted services, third-party antivirus conflicts, damaged system files, or group policy restrictions. The good news is that you can fix the Windows Firewall and get it running again with the right steps.

In this guide, we walk you through every proven method to fix a Windows Firewall that won’t turn on in Windows 11.

Fix Windows Firewall That Won’t Turn On

To follow this guide smoothly, you’ll need a PC with administrator access, the ability to run PowerShell or Command Prompt as admin, and stable internet access to install pending updates. It also helps to know if you recently installed a third-party antivirus, because many security tools disable the Windows Firewall automatically. Once you’re ready, let’s begin troubleshooting.

1. Restart Your PC and Try Turning the Firewall On Again

Sometimes the firewall service fails to load properly when Windows boots.

1. Click the Start menu.
2. Click the Power icon.
3. Choose Restart.
4. After restart, open:
   Settings > Privacy & security > Windows Security > Firewall & network protection.
5. Try enabling the firewall for your active network.

If the issue was caused by a startup glitch, it should be resolved.

2. Uninstall or Disable Third-Party Antivirus Software

Security suites like Avast, Bitdefender, Kaspersky, Norton, McAfee, and Malwarebytes often replace the Windows Firewall with their own. If they malfunction, the Windows Firewall gets stuck in an “off” state.

1. Press Windows + I to open Settings.
2. Go to Apps > Installed apps.
3. Locate your antivirus.
4. Click the three-dot menu → Uninstall.
5. Restart your PC.

Now check whether Windows Firewall turns on.

3. Ensure Windows Firewall Service Is Running

Windows Firewall needs its core service running to work.

1. Press Windows + R, type services.msc, and press Enter.
2. Scroll down and find Windows Defender Firewall.
3. Double-click it.
4. Set Startup type to Automatic.
5. If the service is stopped, click Start.
6. Click Apply, then OK.

Try enabling the firewall again from Windows Security.

4. Check the Base Filtering Engine

The Base Filtering Engine (BFE) service controls all firewall and network filtering. If it’s disabled or corrupted, Windows Firewall cannot start.

1. Open services.msc.
2. Look for Base Filtering Engine.
3. Double-click it.
4. Ensure Startup type is Automatic.
5. Click Start if the service is stopped.
6. Click Apply.

If BFE does not start, move to the repair methods below.

5. Reset Windows Firewall to Default Settings

Resetting the firewall often fixes broken configurations.

1. Press Windows + R, type control, and hit Enter.
2. Open Windows Defender Firewall.
3. Click Restore defaults from the left panel.
4. Click Restore defaults again in the next window.
5. Confirm the action.

Now check whether the firewall turns on properly.

6. Repair Windows Firewall Using Advanced PowerShell Commands

If the firewall registry or policy configuration is corrupted, this PowerShell command resets everything.

1. Right-click the Start button.
2. Select Windows Terminal (Admin).
3. Run the following command:

netsh advfirewall reset

Then run:

netsh advfirewall set allprofiles state on

This fully reinstates all firewall components.

7. Run System File Checker and DISM to Fix System Corruption

Corrupted system files can break the firewall service.

1. Open Windows Terminal (Admin).
2. Run:

sfc /scannow

3. Wait for the scan to finish.
4. Then run:

DISM /Online /Cleanup-Image /RestoreHealth

5. Restart your PC.

Try turning on the firewall again.

8. Re-register Windows Firewall DLL Files (Advanced)

If important firewall DLL files become unregistered, the firewall may fail to start.

1. Open Windows Terminal (Admin).
2. Run each of the following commands one by one:

regsvr32 firewallapi.dll
regsvr32 wscapi.dll
regsvr32 BFE.dll
regsvr32 mpclient.dll

Restart the PC after registering these files.

9. Make Sure Group Policy Isn’t Blocking Windows Firewall

This applies especially to Windows 11 Pro or Enterprise.

1. Press Windows + R, type gpedit.msc, and press Enter.
2. Navigate to: Computer Configuration > Administrative Templates > Network > Network Connections > Windows Defender Firewall
3. On the right, double-check that “Protect all network connections” is set to Not Configured or Enabled.
4. Make sure no policy is set to Off.
5. Close the editor and restart your PC.

If Group Policy blocked the firewall, it should now work.

10. Check for Malware or Rootkits

Malicious software often disables the Windows Firewall.

1. Open Windows Security.
2. Go to Virus & threat protection.
3. Click Scan Options.
4. Choose Full scan.
5. Start the scan and wait until it completes.

Remove any detected threats and restart your system.

11. Install Pending Windows Updates

Microsoft frequently releases fixes for firewall and security services.

1. Open Settings.
2. Click Windows Update.
3. Select Check for updates.
4. Install everything.
5. Restart your PC.

12. Reset Network Settings in Windows 11

A broken network stack can block the firewall from starting.

1. Open Settings > Network & internet.
2. Scroll down and click Advanced network settings.
3. Select Network reset.
4. Click Reset now.
5. Restart the PC after Windows completes the reset.

13. Restore Windows Firewall Using System Restore

If the issue started recently, a restore point can fix it.

1. Press Windows + R, type rstrui, and hit Enter.
2. Click Next.
3. Choose a restore point from before the firewall issue began.
4. Complete the restoration.
5. Restart your PC.

Wrapping Up

When Windows Firewall refuses to turn on in Windows 11, it’s usually due to third-party antivirus software, disabled core services, corrupted system files, or broken configuration policies.

Once you restart the required services, repair system files, reset the firewall, and remove conflicting antivirus tools, the firewall typically starts working immediately. After completing the steps in this guide, your Windows Firewall should turn on normally and protect your system again.