Get-NetFirewallRule
Use Get-NetFirewallRule to list Windows Firewall rules with their direction, action and enabled state.
Documentation: Microsoft Learn — PowerShell module reference
Syntax
See the command anatomy
Read the command and its supplied arguments. This example requires real PowerShell or its module; this diagram does not execute it.
Get-NetFirewallRule [[-Name] <string[]>] [-DisplayName <String[]>] [-Direction <Direction>] [-Action <Action>] [-Enabled <Enabled>] [-Profile <Profile>] [-CimSession <CimSession[]>] [<CommonParameters>]- Stage 1Get-NetFirewallRule
-Name -DisplayName -Direction -Action -Enabled -Profile -CimSession
Try it
PowerShell example · browser support is limited.
Execution scope: The full example below requires PowerShell outside this browser. You can edit this runner to use the supported practice commands; unsupported syntax returns an explanation.
Follow the objects
Run the command to inspect each stage.
Examples
Get-NetFirewallRule -Direction Inbound
Show reference output
Sample output · fictional data, shaped like the real thing
DisplayName Profile ----------- ------- Windows Remote Management Domain, Private Remote Desktop - User Mode Domain, Private
Parameters
Parameter definitions:
-Name-DisplayName-Direction-Action-Enabled-Profile-CimSession
Practical use and troubleshooting
Practical scenario: Use Get-NetFirewallRule when you need to list Windows Firewall rules with their direction, action and enabled state. Start with one identified target and inspect the returned values before extending the operation to a list. Keep the identity in your report so you can trace each result back to the object or path that produced it.
Common error and fix: Port values are held in associated port-filter objects rather than ordinary rule properties. Query the associated filter before concluding that a rule has no port restriction. In an unattended script, capture this failure with its original error record and record which target failed. An empty result and an unsuccessful query must remain distinguishable in the final report.
See also: Get-NetTCPConnection. Get-NetFirewallRule reads firewall policy; Get-NetTCPConnection reports TCP connections and listeners. A rule existing in policy does not prove an application is listening on its port. Read the linked command before substituting it; similar names do not imply identical inputs or output.
Recap
Get-NetFirewallRule Use Get-NetFirewallRule to list Windows Firewall rules with their direction, action and enabled state.
Next: Get-LocalUser