The firewall in Windows7 sometimes notifies the new application accessing network and asks user whether to stop the application's network accessing, but sometimes it does NOT do this. I wonder how it determines whether the new application should be notified or not? How to make the firewall notify all new application's network accessing? Is there any advanced rules affect this?

Regular internet application usually add themselves to the list of Windows Firewall exceptions (with user consent) during installation itself. So when these applications access the network, a Firewall notification does not pop-up. But when an application that does not have an entry in the list of Windows Firewall exceptions attempts to access the network, you usually get a notification. Just to be sure you get notifications to all newly installed programs, ensure these settings reflect on your system too: Please revert back here if you need any further assistance. Hope it helps! Kunal D Mehta - a Windows Server Enthusiast | My first TechNet Wiki Article

This option is on, but there are still some applications do not trigger the notification, the firewall do not block them and they didn't add themselves to the exception list. Maybe i think the firewall just notify incoming connections, but do not notify outgoing connections, so is there any way to make the firewall notify outgoing connections?

Hi, A Windows Security Alert dialog box that appears when a program that is not listed in the exceptions list attempts to listen for unsolicited traffic on a port. If you have administrative rights on a computer, the notification displays the option to add the program to the exceptions list, which will allow the program to receive unsolicited traffic. If you do not have administrative rights on a computer, the notification displays a warning that a program is attempting to listen on a port. Also, please check whether the program is listed in Incoming rules or Outgoing rules of Advanced settings.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Thanks. What makes me confused is that the notification is not appears for all applications(these applications are not in exceptions list). For example, some IM programs will trigger the notification, but some other browser programs do not trigger it. According to above description, the notification is just triggered when programs attempt to LISTEN on a port, but do not care the programs send an outgoing connection? If so, is there any way makes the win7's firewall notify me when the programs attempt to send outgoing data just as when the programs attempt to listen on a port?

Hi, Regarding why a browser does not trigger it, it is because the browser does not attempt to listen for unsolicited traffic on a port so that Windows Fire Wall cannot block it and notify you. Also, there is no way to make Windows Fire Wall to notify you this. This is by design. If you find have any inconveniences, as well as suggestions, please submit your feedback to our Product Feedback Team : http://mymfe.microsoft.com/Windows%20%207/Feedback.aspx?formID=195 Thanks.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Thanks. This is the answer. :)