How To Enable Ping In Windows Server 2016 Firewall

By default in Windows Server 2016 the Windows Firewall is configured to drop all inbound ICMP traffic. This includes echo requests which are common from ping, which can make network troubleshooting difficult.

Here we cover how to allow ping through Windows Firewall.

A common response is usually to simply disable the whole Windows Firewall, however this is not recommended as the Windows Firewall does a good job at providing a basic level of system protection. We will only be allowing the specific rules required to allow ping to succeed.

Allow ping through Windows Firewall

  1. First we need to open Windows Firewall, this can be done a few ways. My favourite method is to simply hit the Windows key to open start, then start typing firewall. As shown below Windows Firewall with Advanced Security should show, click this.

    Windows Server 2016 Start Menu - Advanced Firewall

    Alternatively you can simply type ‘firewall’ and press enter in PowerShell to open the same interface.

  2. From the Windows Firewall with Advanced Security window that opens up, select Inbound Rules from the menu on the left.

    Windows Firewall Inbound Rules

  3. From the rules listed under Inbound Rules, select “File and printer Sharing (Echo Request – ICMPv4-In)” and enable the rule.

    Windows Firewall Enable ICMPv4 In

    Note that this will only allow IPv4 requests in, if you need IPv6 then you will want to enable the “File and Printer Sharing (Echo Request – ICMPv6-In)” rule.



  4. Once enabled the server should now respond to ping requests. From my desktop I begun to ping my Windows Server 2016 virtual machine at 192.168.1.13 before enabling the rule. You can see the first request timed out. I then enabled the rule while the ping was running and the following requests succeeded, confirming that this is working as expected.

    Command Prompt Ping Example

Summary

By Default Windows Firewall prevents ICMP echo requests, this results in the server not responding to ping. By enabling this firewall rule we have enabled ping, which can help us with network troubleshooting.

Leave a comment ?

12 Comments.

  1. Thanks from me, too – for asking the question in the first place as well as the answer!

  2. if you want to save a bit of time, use the command prompt.

    sconfig

    Select the option to configure remote management
    Select the option to configure server to respond to ping

  3. How ??? I have allow chrome in various boxes but still is getting blocked ! In order to get chrome online i have to completely disable Firewall ??? What is MS doing ??? That’s it !!! I’m going back to win 7 !This one i can control !!!

  4. Thanks buddy, that works for me

  5. Thanks, worked for me

  6. Nice one – worked for me

  7. Thanks!! m8y

  8. Still works!

Leave a Comment

NOTE - You can use these HTML tags and attributes:
<a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>