Allow ICMP Echo Reply on Windows Server 2019/2022

How to allow ICMP Echo Reply on Windows Server 2019?. The default setting of Windows Server Firewall is to block ICMP. This means the Server will never reply to ping packets from other hosts even within your Local network. Here I’ll show you the steps to allow ICMP Echo Reply on Windows Server 2022/2019. The procedure will be similar for Windows Desktop operating systems.

Allow ICMP Echo Reply on Windows Server 2019/2022

We are going to consider two options that can be used to allow ICMP Echo Reply on Windows Server 2019 or Windows Server 2022.

1. Enable ICMP Echo Reply using PowerShell

We can use PowerShell as Administrator to enable echo reply on our Windows machine.

Launch PowerShell as Admin and run the following commands to add Firewall rule that will accept echo reply on the server.

New-NetFirewallRule `
-Name 'ICMPv4' `
-DisplayName 'ICMPv4' `
-Description 'Allow ICMPv4' `
-Profile Any `
-Direction Inbound `
-Action Allow `
-Protocol ICMPv4 `
-Program Any `
-LocalAddress Any `
-RemoteAddress Any 

Confirm the settings by checking Firewall Rules.

PS C:\Users\Administrator> Get-NetFirewallRule | Where-Object Name -Like 'ICMPv4' 

Name                  : ICMPv4
DisplayName           : ICMPv4
Description           : Allow ICMPv4
DisplayGroup          :
Group                 :
Enabled               : True
Profile               : Any
Platform              : {}
Direction             : Inbound
Action                : Allow
EdgeTraversalPolicy   : Block
LooseSourceMapping    : False
LocalOnlyMapping      : False
Owner                 :
PrimaryStatus         : OK
Status                : The rule was parsed successfully from the store. (65536)
EnforcementStatus     : NotApplicable
PolicyStoreSource     : PersistentStore
PolicyStoreSourceType : Local

2. Enable ICMP Echo Reply from Desktop GUI

Login to your Windows Server 2019/2022 from Login screen or via RDP and click on Server Manager:

Then navigate to:

Tools > Windows Defender Firewall with Advanced Security

Select Inbound Rules from the left pane and click New Rule under Actions on the right pane.

Select Custom rule to add and click “Next“.

Select All programs in the next window. then click Next.

Under Protocol Type, select ICMPv4.

Specify source IP or network to accept ping from. You can use “Any IP address” to accept ping from any IP.

Accept connection matching the rule.

Choose Profiles the rule will apply for.

Give the rule a name and optional description then save settings using “Finish“.

If you’re using IPv6, do the same and choose ICMPv6 under Protocol Type .

Also check:

• How to install OpenSSL on Windows Server
• How to run Linux on Windows Server with WSL
• How to enable Remote Desktop Protocol (RDP) on Windows Server
• How to run Docker Containers on Windows Server