How to Check Whether a Firewall Is Blocking the RDP Port (3389)

November 18, 2025

How to Check Whether a Firewall Is Blocking the RDP Port (3389)
Cheap Linux Server

Remote Desktop Protocol (RDP) is essential for managing Windows servers and remote machines. When RDP suddenly stops working, one of the most common causes is a firewall blocking the RDP default port 3389.
In this guide, you’ll learn how to check if the firewall is blocking the RDP port and what steps you can take to diagnose and fix the issue.


1. Check Windows Firewall Rules

Windows Firewall often blocks incoming RDP traffic if the rule is disabled.

Steps:

  1. Open Start Menu → search Windows Defender Firewall → open it.
  2. Click Advanced settings.
  3. In the left pane, select Inbound Rules.
  4. Look for rules named
    • Remote Desktop – User Mode (TCP-In)
    • Remote Desktop – User Mode (UDP-In)
  5. Make sure these rules are Enabled and Allowed.

If they are disabled, right-click → Enable Rule.


2. Verify That Port 3389 Is Listening

To confirm that RDP is running on the machine:

Run this command (CMD or PowerShell):

 Verify That Port 3389 Is Listening

netstat -ano | findstr 3389

If you see a line with LISTENING, the port is open internally.

If you don’t see any output, Remote Desktop Services may not be running or the port has been changed.


3. Test the Port from Another Computer

You can test remotely whether the port is reachable.

Using PowerShell (recommended):
Test the Port from Another Computer

Test-NetConnection -ComputerName SERVER-IP -Port 3389

You’ll get:

  • TcpTestSucceeded: True → Port is open
  • TcpTestSucceeded: False → Port blocked or server unreachable

Using Telnet (older method):

If Telnet is installed:

telnet SERVER-IP 3389

A blank screen means it connected successfully.
A connection error means the port is blocked.


4. Check Network Firewalls and Cloud Firewalls

If the server is on:

  • AWS
  • Azure
  • Google Cloud
  • VMware
  • Corporate Network

…then external firewalls may block RDP.

Check the following:

  • Security groups / inbound rules
  • Network firewall policies
  • VPN/firewall appliance settings

Make sure TCP 3389 is allowed inbound from your IP.


5. Check Router or ISP Blocking

Some networks block RDP traffic at the router or ISP level.

Solutions:

  • Allow TCP 3389 on your router firewall
  • Use a VPN to bypass ISP restrictions
  • Change RDP port to something else (e.g., 3390)

Conclusion

RDP connection issues are almost always linked to firewall blocking, port configuration, or service failures. By checking firewall rules, testing the port, and verifying network policies, you can quickly identify and fix the issue.


 

How to Check Whether a Firewall Is Blocking the RDP Port (3389) (F.A.Q)

What is the default RDP port?

RDP uses TCP 3389 by default.

 

 

How do I test if port 3389 is open?

Use PowerShell:
Test-NetConnection -ComputerName IP -Port 3389.

 

 

Why is RDP still blocked even when Windows Firewall allows it?

A network firewall, cloud firewall, or router may be blocking the port.

 

 

Can I change the RDP port?

Yes, through the Windows Registry. After changing it, update all firewall rules accordingly.

How to Set Screen Resolution in RDP (Remote Desktop Protocol)

How to Set Screen Resolution in RDP (Remote Desktop Protocol)

Remote Desktop Protocol (RDP) is widely used to access Windows servers and PCs remotely. One of the most important user-experience settings is screen resolution. If the resolution is not set correctly, you may face blurry visuals, oversized windows, or black borders....

0 Comments

Submit a Comment