Quick Topics
General Questions
Is WhoIsConnected free?
Yes. The Free Edition provides network visibility and application termination. Premium adds advanced details, AI analysis, and application/network blocking and unblocking features.
Is WhoIsConnected a firewall?
No. WhoIsConnected is not intended to replace Windows Firewall. It provides visibility, analysis and user-controlled actions, while blocking rules are managed through Windows Firewall.
When are administrator rights required?
WhoIsConnected itself normally runs with standard user rights. The first Block or Unblock action in a session asks for Windows administrator permission so HelperWhoIsConnected can perform network-control actions. If permission is not granted, blocking and unblocking cannot be performed. TERMINATE SELECTED does not require administrator rights.
Does WhoIsConnected require an internet connection?
The application operates locally. Optional features such as external network information retrieval or AI-assisted analysis may require internet access.
Privacy and Data
Does WhoIsConnected upload my network data?
Network monitoring is performed locally on your Windows computer. The main application describes WhoIsConnected as a privacy-first tool with no cloud account required and no network-data upload.
Does WhoIsConnected store connection history?
The Logger can record connection changes detected during refreshes and the interface includes an option to save logs. See Logger for details.
Where are blocked connections stored?
Blocked communication is managed by Windows Firewall. WhoIsConnected can display blocked network and application information through its menu.
Network Monitoring & Logger
Does WhoIsConnected show every network communication?
The main view shows active connections detected at refresh time. Very short-lived connections can disappear before they are visible in the active list.
The Logger improves visibility by recording connections detected as new or closed across refreshes. Because detection is refresh-based, a connection that starts and ends entirely between refreshes may still be missed.
How often can WhoIsConnected refresh automatically?
Automatic refresh is currently available at 2-minute or 10-minute intervals. Manual refresh is also available at any time.
What do INITIAL, NEW and CLOSED mean?
INITIAL identifies the Logger's starting connection view, NEW identifies a connection newly detected on a later refresh, and CLOSED identifies a previously observed connection that is no longer detected.
AI Analysis
What is AI Analysis?
AI Analysis helps explain technical network information. It evaluates the selected application together with the selected network connection.
Why can the same network have different AI results?
The network alone is not the complete context. The same network may be normal for one application and unusual for another.
Does AI decide whether an application is unsafe?
No. AI provides analysis and suggestions. The user remains responsible for deciding whether action is required.
Can AI analyse a closed connection from the Logger?
The supplied Help material does not define AI analysis directly from Logger entries. AI analysis is documented for the currently selected application and network connection, so this Help version does not claim Logger entries can be sent directly to AI.
Application & Network Control
Can WhoIsConnected block an application?
Yes, in Premium. Block adds the selected application to the blocked-app list for the current session, blocks its currently discovered networks, and allows newly discovered networks for that blocked application to be blocked on later refreshes. Block All applies this behavior to the applications currently visible in the application table.
What is the difference between blocking an application and blocking a network?
Application Network Control applies to the application's network access. Connection Control applies to a selected connection and can stop that connection or block its IP address or related network range.
Can I select several applications or networks at once?
No. The current interface uses one-click single selection: one application or one network connection is selected at a time. Selecting another item moves the selection.
Why does an application reconnect after I stop a connection?
Stopping a connection affects the current communication. If the application still requires network access, it may establish another connection. Use an appropriate blocking action if your intention is to prevent further communication.
Can blocking actions be reversed?
Application-level controls include Unblock and Unblock All. Blocked network rules can also be reviewed through the application's blocked-network controls.
Licensing
Licensing information, purchase, renewal and expiration details are explained in Premium License →
Important
WhoIsConnected provides information and user-controlled actions. The final decision about allowing, stopping or blocking communication remains with the computer user.