How to Enable Your Router Firewall
The SPI (Stateful Packet Inspection) firewall in your router filters out unsolicited incoming traffic before it reaches any device on your network. It is usually enabled by default, but worth confirming.
What the Router Firewall Does
Your router's SPI firewall inspects incoming network packets and blocks any that were not requested by a device on your local network. When your laptop requests a webpage, the router allows the web server's response through because it knows what was requested. But if an outside connection tries to initiate contact with a device on your network without any prior request, the firewall blocks it.
The SPI firewall is your first line of defense against port scanning, unsolicited connection attempts, and some types of network-based attacks. It operates at the network level and protects every device on your network simultaneously, including smart home devices that cannot run their own security software.
How to Enable the SPI Firewall
Go to http://192.168.1.1 or your router gateway IP. Enter admin credentials.
Look under Security, Advanced Security, or Firewall. The option is usually labeled SPI Firewall, Stateful Packet Inspection, or simply Firewall Protection.
Toggle or check the SPI Firewall option to Enabled. Some routers also offer protection against DoS (Denial of Service) attacks and port scan responses — enable these too if available.
Click Save or Apply. The firewall is active immediately — no router restart is required on most models.
The SPI firewall is separate from port forwarding rules. Enabling the firewall does not break any port forwards you have already set up. Forwarded ports are explicitly allowed exceptions in the firewall.
Where to Find Firewall Settings by Brand
| Brand | Path to Firewall Settings |
|---|---|
| Netgear | Advanced > Security > Firewall |
| TP-Link | Advanced > Security > Firewall |
| Linksys | Security > Firewall |
| Asus | Firewall > General (enabled by default) |
| D-Link | Advanced > Firewall Settings |
| Arris/Comcast | Gateway > Firewall |