Malwarebytes Windows Firewall Control is a small, free utility that lets you decide which programs can reach the internet. If your data package vanishes faster than it should, it shows you who is using it and lets you stop them.
Quick summary: It is best for Windows users on limited data who want control without learning the built-in firewall. My verdict is positive, and the key setting is Medium Filtering, which blocks any outbound connection without an allow rule.
Why My Internet Package Kept Disappearing
On a limited home connection, you notice every gigabyte. I was not downloading much, yet the package kept shrinking.
Windows runs many things in the background: update checks, system services, and apps that sync without asking. None of that is visible by default, and the built-in firewall panel is not friendly for this job.
That is why I tried Malwarebytes Windows Firewall Control. It doesn’t replace Windows Firewall. It puts a simple control panel on top of it.
What Malwarebytes Windows Firewall Control Does
Here is what stood out in daily use:
- Light on the system: In Task Manager, the interface (wfcUI.exe) used about 24 MB and the background service (wfcs.exe) about 11 MB, roughly 35 MB combined. CPU use stayed at 0–1% when I checked. I did not notice any slowdown while it ran.
- Inbound and outbound control: You choose a filtering profile instead of editing raw firewall rules.
- Real-time notifications: You get an alert when a program tries to connect, so you can allow or block it.
- Rules list: Every decision is saved, so you can review or change it later.
(Figures are from a single moment on my PC and will vary with your setup.)
Malwarebytes acquired the tool in June 2018, after earlier purchases of AdwCleaner (2016) and Junkware Removal Tool (2015). If you want the company’s main product, see my Malwarebytes Standard Edition download guide.
Requirements Before You Install
- Windows 10, 8.1, 8, or 7 (32-bit and 64-bit) per the vendor’s notes. I ran it on Windows 11. [VERIFY: Windows 11 support on the official page]
- Microsoft .NET Framework 4.6 or newer.
- The Windows Firewall service must be running.
- The DNS Client service must be running, or notifications will not work properly.
The latest release notes mention a new “Enable beta updates” checkbox in the About tab, which is off by default, and a fix for connection logs not loading on some PCs.
Step-by-Step Setup Guide
Want to try it yourself? Here is the official download.
Malwarebytes Windows Firewall Control 6.37.0.0
A lightweight control panel for the built-in Windows Firewall.
Block or allow apps | Real-time alerts | Filtering profiles
- New: an “Enable beta updates” checkbox in the About tab. It is off by default.
- Fixed: connection logs not loading on some PCs.
Important note: The Windows Firewall service must be running, and the DNS Client service must be running for notifications to work. If another security suite already manages your firewall, the installer will warn you about running two at once.
Download from the vendor’s official page only. Last checked: October 2026.
Step 1: Install and Read the Firewall Warning
Run the installer. If another security product manages your firewall, you will see a warning.
In my case, ESET was registered with Windows Security Center, and the installer warned that two active firewalls can cause connection problems. You can continue, but keep this in mind.
Step 2: Choose Install Options
Keep the defaults: shortcuts, start at logon, and recommended rules. Click Install, then Run when it finishes.
Step 3: Open the Main Panel and Request Elevation
Open the Dashboard and read the Windows Firewall state. Mine showed Off, with all traffic allowed.
Click Request elevation (1) to give the program administrator rights. You need this to change anything. Then open Profiles (2).
Step 4: Pick Medium Filtering
On the Profiles tab, I chose Medium Filtering (recommended). Outbound connections without a matching rule are blocked, and only programs with an allow rule can connect.
This is what limits background data use. High Filtering blocks nearly everything, and Low Filtering allows everything except what you block.
Step 5: Confirm the Dashboard Turns Green
Back on the Dashboard, the state changed to On, with inbound and outbound connections both set to Block. The red warning became a green check mark.
Step 6: Turn On Notifications
Open Notifications (1) and select Display notifications (2). Now every blocked outbound attempt shows an alert.
Learning mode also creates allow rules for digitally signed programs and alerts you only about unsigned ones. It is useful for the first day, when everything is new.
How I Used It to Save Data
I expected a flood of pop-ups, and the first hour was busy. After that, it calms down because each decision becomes a saved rule.
My routine:
- Read the program name and path. If I recognize it and need it, I allow it.
- Block what I do not need online. Updaters, sync tools, and launchers get a block rule.
- Check the Rules tab later. Blocked items stay blocked, and you can undo any of them.
- Compare your usage. Check Settings > Network & internet > Data usage before and after.
A Problem You May Hit
If you block too much, your internet can feel broken. Browsers and system components need rules too.
The Profiles page has a revert option: you can set a different profile to return automatically after a number of minutes. Use it when you need to install or update something.
Be careful with Windows Update. Blocking it saves data, but you stop receiving security patches. A better plan is to allow updates only when you have spare data.
Which Filtering Level Should You Choose?
- Medium Filtering if you want control and are willing to answer a few alerts.
- Low Filtering if you only want to block a few known data hogs.
- High Filtering only if you are comfortable building rules yourself.
Who Should Skip It
Skip it if you hate pop-ups or share the PC with people who will not understand them. Also skip it if another security suite already manages your firewall and you do not want two systems fighting. If you are still choosing a suite, see Bitdefender vs Norton 360 Deluxe.
Firewall control does not replace scanning. For a second opinion on a suspicious file, my Microsoft Safety Scanner review explains what that tool can and cannot do.
Pros and Cons
Pros
- Simple panel on top of the Windows Firewall
- Easy profile switching
- Clear alerts with saved rules
Cons
- Needs patience in the first hour
- Possible conflicts with another active firewall
- Wrong blocks can break apps
Frequently Asked Questions
Is Malwarebytes Windows Firewall Control free?
Does it replace the Windows Firewall?
Why am I not getting notifications?
Can it run with another firewall such as ESET?
Does it really save internet data?
Final Verdict
Malwarebytes Windows Firewall Control is worth trying if hidden background traffic eats your data. Use Medium Filtering, turn on notifications, and spend one patient hour building your rules.
Do not use it if you want a silent, set-and-forget tool. Its value comes from the few choices you make.
