Windows already has a strong firewall — what it never had was a friendly face. This little tray tool from Binisoft, now owned by Malwarebytes, gives you prompts, profiles and a readable log on top of the built-in firewall. Here is how it really works.
A program tries to reach the internet and silently fails. Or worse, everything reaches the internet and you never know. Windows Firewall Control fixes the visibility problem: it watches over the rules of the built-in Windows Firewall and asks you, in plain language, what each new program may do. This guide explains the tool honestly — what it is, what it is not, and the settings that make it useful from day one.
Windows Firewall Control does not replace Windows Firewall, and it does not filter a single packet itself. It is a friendly front-end — a control panel that sits in your system tray and manages the rules of the firewall that is already built into Windows. Every allow and block decision is still made by Windows Defender Firewall.
The tool began life at Binisoft, and Malwarebytes acquired it in 2018. The name confuses people, so be clear about the division of labour: Windows provides the wall, this tool provides a usable door handle. If the tool is closed or even uninstalled, the Windows Firewall keeps running with the rules it already has.
Because this tool touches your firewall, the download source matters more than usual. Get it only from the official Malwarebytes or Binisoft page — never from a random download site that bundles extras.
The four profiles are the heart of the tool. Medium Filtering is the working default for almost everyone: programs with an allow rule can connect out, everything else outbound is blocked. High blocks all outbound traffic, Low lets unmatched outbound traffic through, and No Filtering switches Windows Firewall off entirely.
With notifications on, the first time a program tries to reach the internet and no rule matches, you get a prompt instead of a silent failure. You can allow it once, allow it always (which creates a permanent rule), block it once, or block it always.
A small honesty note on editions: in the old Binisoft days, notifications and the Learning Mode were extras for registered users. Malwarebytes later made the program free for everyone, but descriptions online still differ — check what your installed version shows rather than trusting any article, including this one.
The Connections Log lists recent allowed and blocked connections with the program, the address and the port. When an app suddenly stops working, this log is the fastest honest answer to the question did the firewall do this? — you can see the blocked attempt and create the right rule from it instead of guessing.
Over months, a prompt-driven ruleset grows barnacles: rules for programs you uninstalled, duplicates, rules pointing at files that moved. The Rules panel is where the housekeeping happens — the tool can surface invalid and duplicate rules, and you can merge or delete them. A tidy ruleset is not vanity: when something breaks, a short list of rules you recognise is the difference between a two-minute diagnosis and an afternoon of archaeology.
Export the ruleset once it is in good shape. That backup turns a future reinstall or a new PC from a week of fresh prompts into a restore — and it is your written record of what this machine is allowed to do.
Profiles, prompts and rules — the whole Firewall Control walkthrough is in the video.
▶️ Watch Full VideoNo. It filters nothing itself. It is a management front-end for the Windows Defender Firewall already built into Windows — it creates, edits and displays the rules that Windows itself enforces.
The program is free to use. Historically, under Binisoft, notifications and Learning Mode were registered-user extras; after Malwarebytes acquired the tool it became free for everyone, though older articles still describe the old split. Check the version you install.
Medium Filtering. Outbound connections with an allow rule pass, everything else outbound is blocked — that is the balance the tool itself recommends, and it is the profile the prompts and logs are designed around.