I am using Windows Firewall on a Windows 7 laptop to block outgoing connections by default. I want to allow SurveyCTO, which requires Java, to sync with a remote server. Even with "Allow" rules for the SurveyCTO_Client.exe executable and java.exe, the client program fails to sync, with the following error.

Could not fetch source forms...

Reason: Unable to fetch form list: Unexpected java.net.SocketException

How can I permit the connection?

I'm new to this aggressive firewalling business. In general, is there a good way to determine which connections need to be allowed?

  • Have you tried asking them what ports they use? surveycto.com/support/login.html
    – DavidPostill
    Commented Oct 17, 2014 at 7:54
  • I have now! But isn't it better to allow just the program rather than opening up a whole port?
    – katriel
    Commented Oct 17, 2014 at 9:08

1 Answer 1


SurveyCTO uses javaw.exe rather than java.exe, so this is the program that needs to be allowed outgoing access in Windows Firewall.

I contacted SurveyCTO support to find out. Furthermore, SurveyCTO uses the standard HTTP ports 443 and 80, so creating an allow rule for the program allows keeping those ports blocked.

javaw.exe is the Java runtime that cannot access the console, and it is often used to launch GUI apps.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .