Windows Firewall Control (WFC) by BiniSoft.org

https://ibb.co/yFpcc7tq
https://ibb.co/fV2Q7Tjd
Can you add this option in security > secure profile?

 

Service based rules for wuauserv service does not work on Windows 10/11 anymore like they used to work in Windows 7/8/8.1. You need to allow unrestricted access for svchost.exe to allow Windows Update. Windows Store also requires unrestricted access for svchost.exe. The thing is, in latest versions of Windows, multiple services or no service at all (svchost.exe instances not tied to a specific Windows service) are involved in Windows Update. The initial call may use wuauserv service or BITS or CryptSvc, but then multiple svchost.exe instances are spawned and those are still blocked. The result is that Windows Update fails.

Windows Update requires an outbound allow rule for C:\Windows\system32\svchost.exe on remote ports 80,443 and TCP protocol. Windows Firewall Control recommended rules contain a rule named WFC - Windows Update for this purpose. If this rule is to broad for your taste, keep the rule disabled and enable it manually once a week when you check for Windows updates and then disable it again once they are installed. But, it doesn't worth the trouble. Just allow svchost.exe and forget about it. If you want to block telemetry, forget about it. Windows can send this encrypted data in so many other circumstances, making this task almost impossible.

Since block rules have higher precedence than allow rules in Windows Firewall, for the mentioned services that you want to block on purpose you could create block rules for svchost.exe and those service names. There is no other way and is out of WFC control.

 

I am afraid I do not understand what is the request here. Secure Profile already prevents the changes of the properties from your screenshots. You can still click on them but if you reopen the dialog you will notice the changes were not applied.

 

@ alexandrud Thank you for your explanation in post 7702. It answered a few questions I had.

 

Not only a great program but also great answers! Thank you very much!

 

Good morning all,
I would like to download WFC version to 6.11. When I click the link in this forum that says it is supposed to point to 6.11, I am only offered the latest version.
Can anyone help? Thank you in advance!

 

Hello,
Uptodown website has old versions of WFC, included 6.11.0.0 at https://windows-firewall-control.en.uptodown.com/windows/versions

 

Please take it from official place:

https://binisoft.org/download/old/61100/wfc6setup.exe

and not from a unofficial resource. There exist no public mirrors or other official download URLs except binisoft.org (which is a statement from developer).

Code:

SHA256: 16442002148e25cc009ad69e6292ce763eeb93108a9008c35019ec2ca7252f32
SHA512: e004672275ad23d7413960836b9b78cd76f5d35809ca7dc3e09442e597b755cf215d02b39596039d71b03c697a47eb042dfc2f62c25463337c2bd7985c67c59e

Thanks and greetings

 

I'm sorry,
I didn't know it was possible download the previous versions from Binisoft website. Anyway even on the official Binisoft WFC https://www.binisoft.org/wfc.php it is possible download the latest version from public mirrors like Majorgeeks or Softpedia so I though it was possible to download older versions from Uptodown.

 

@Serphis

Yes, you are right, I saw that right now, SORRY! My fault!

 

No problem, of course.

 

Digital signatures ok? Then all right.

 

Use this forum post to find older WFC installers: https://www.wilderssecurity.com/threads/windows-firewall-control-old-versions.431332/
Any reason why you need this specific version which is one year old already?