How to Block an App from Accessing the Internet on Windows
Whether you want to stop a game from auto-updating, prevent an app from phoning home with telemetry, or block a suspicious program you just discovered — Windows gives you the tools to cut off any application's internet access completely. Here are the most reliable methods, from the quickest right-click block to permanent Windows Firewall rules.
Quick Answer
Fastest: Download SterJo NetStalker (free) → run as administrator → right-click the app's connection → Block. Done in under a minute, permanent.
Built-in (no download): Windows Defender Firewall → Outbound Rules → New Rule → Program → browse to the .exe → Block. Takes about 2 minutes.
📖 In This Guide
Method 1: SterJo NetStalker — Right-Click Block (Fastest)
If the application is currently running and making a connection, SterJo NetStalker is the fastest way to block it. You don't need to know the exe path or navigate any settings panels — just right-click and block from the live connection list.
Step-by-Step:
- Download SterJo NetStalker (free, installer or portable)
- Right-click the executable and choose Run as administrator
- Find the application you want to block in the connection list — look for its process name in the left column
- If you're unsure which entry is correct, check the Path column for the full executable location
- Right-click the entry → choose Block (or "Create block rule")
- The rule takes effect immediately — the process loses internet access instantly and permanently on every future launch
The block rule appears in NetStalker's Policy Rules tab where you can review, edit, or delete it at any time.
🛡️ SterJo NetStalker v1.4
Free • Portable • Windows XP to 11 • 2.2 MB
- Real-time connection list — see every TCP/UDP connection with process name and path
- Right-click any connection to block the program instantly
- Policy Rules tab — manage all your block and allow rules in one place
- Interactive alerts when a new program first connects — allow or block on the spot
- Create rules by executable path, IP address, or port number
- Portable version available — no installation required
Method 2: Windows Defender Firewall Outbound Rule (No Extra Software)
Windows includes a built-in firewall with outbound rule support. This method works without any additional software and creates a rule that persists across reboots. The downside is that you need to know the application's .exe path and navigate several dialog windows.
Step-by-Step (Windows 10 / 11):
- Press Windows + S, search for Windows Defender Firewall with Advanced Security, and open it
- In the left panel, click Outbound Rules
- In the right panel (Actions), click New Rule…
- Choose Program → click Next
- Select This program path → click Browse → navigate to the application's .exe file
- Click Next → choose Block the connection → click Next
- Leave all three profile checkboxes ticked (Domain, Private, Public) → click Next
- Give the rule a descriptive name (e.g. "Block Acme App — outbound") → click Finish
The rule is now active. The application cannot make any outbound internet connections on any network. The rule persists until you delete it from Outbound Rules.
Method 3: NetStalker Policy Rules — Block Before the App Connects
If you want to block a program before it ever makes a connection (for example, you want to prevent a newly installed app from ever phoning home), use NetStalker's Policy Rules tab directly:
- Open NetStalker as administrator
- Go to the Policy Rules tab
- Click Add Rule
- Browse to the application's executable path
- Set the action to Block
- Save — the rule applies immediately, even if the application isn't currently running
Common Reasons to Block an App's Internet Access
| Reason | Example |
|---|---|
| Stop automatic updates | Block a game launcher so it can't update while you're busy |
| Prevent telemetry/data collection | Block an app from sending usage data back to its developer |
| Contain a suspicious program | Block an unknown process while you investigate it |
| Enforce offline-only use | Keep a licensed app offline so it can't deactivate the license |
| Save bandwidth | Block background sync on a metered or limited connection |
| Parental control | Block a specific game or app from accessing online features |
| Privacy | Block a browser extension host process from contacting external servers |
How to Unblock an App
To remove a block you created in NetStalker: open the Policy Rules tab → select the rule → click Delete. Internet access is restored immediately.
To remove a block in Windows Defender Firewall: open Windows Defender Firewall with Advanced Security → Outbound Rules → find the rule you created → right-click → Delete.
🔍 Related: Learn how to identify which programs are connecting to the internet before you decide what to block — see How to Check All Active Network Connections on Windows.
Frequently Asked Questions
1. Will blocking an app via Windows Firewall affect other apps?
No. Windows Firewall outbound rules are scoped to the specific executable path you specify. Only that program is blocked — all other applications on your PC continue to access the internet normally.
2. Can a blocked app bypass the block by renaming its executable?
Both Windows Firewall and NetStalker rules are path-based. If the app's executable is renamed or moved, the rule no longer matches and the block is bypassed. Sophisticated software that updates itself may also replace its executable, invalidating the rule. If this is a concern, re-check your rules after app updates.
3. I blocked an app but it seems to still update. Why?
Many applications use a separate updater executable (e.g. updater.exe or update_helper.exe) rather than their main executable to check for updates. Blocking the main exe doesn't block the updater. Open NetStalker and watch for any other processes from the same app folder making connections — then block those separately.
4. Does blocking an app's internet access break its offline functionality?
Only if that functionality requires an internet connection. Most local features — opening files, editing, running calculations — continue to work normally. Features that require online authentication, license checks, cloud sync, or online content will stop working while the app is blocked.
5. Can I block internet access for a Windows Store (UWP) app?
UWP apps run in a sandboxed environment and are more complex to block via path-based rules. Windows Defender Firewall can block them, but you need to target the app's package rather than a standard .exe path. For most use cases, using Windows Settings → Apps → the specific app → Advanced options → Background app permissions is an easier approach for Store apps.
6. Will the block survive a Windows update?
Windows Firewall rules survive Windows updates. NetStalker policy rules are stored in the tool's configuration and also persist. However, if a Windows update replaces the executable of a built-in application at a new path, you may need to create a new rule for the updated path.
📚 Related Guides
Is Someone Spying on My Computer?
Identify all active connections and suspicious network activity on your PC.
SterJo NetStalker vs netstat
Comparing the built-in command-line tool against a dedicated GUI monitor.
Monitor Network Activity in Windows
Full guide to tracking all network usage by application.
Disable Startup Programs in Windows
Stop unwanted programs from launching — and connecting — at boot.
✅ Block Any App's Internet Access in Seconds
SterJo NetStalker shows every active network connection in real time. Right-click any app and block it permanently — no settings panels, no guessing exe paths.
📋 Network Control Guides
- SecurityBlock App Internet Access
- SecurityCheck for Spying Activity
- NetworkMonitor Network Activity
- NetworkNetStalker vs netstat
- WiFiSee Who Is on Your WiFi
🔗 Related Tools
💡 Quick Tip
Many apps use a separate updater executable — not the main .exe — to phone home. If blocking the main app doesn't stop updates, open NetStalker and watch for other processes from the same folder making connections.
📊 Did You Know?
Windows Defender Firewall has outbound rule support built in, but it's hidden behind several menus. Most Windows users never create an outbound rule — because the interface is buried in Advanced Security settings that look intimidating.