Automatically allowing communications for essential network services
|Article:HOWTO81172|||||Created: 2012-10-24|||||Updated: 2013-10-07|||||Article URL http://www.symantec.com/docs/HOWTO81172|
You can enable the options that automatically permit communication between certain network services so you do not have to define the rules that explicitly allow those services. You can also enable traffic settings to detect and block the traffic that communicates through NetBIOS and token rings.
You can allow outbound requests and inbound replies for the network connections that are configured to use DHCP, DNS, and WINS traffic.
The filters allow DHCP, DNS, or WINS clients to receive an IP address from a server. It also protects the clients against attacks from the network with the following conditions:
If the client sends a request to the server
The client waits for five seconds to allow an inbound response.
If the client does not send a request to the server
Each filter does not allow the packet.
When you enable these options, Symantec Endpoint Protection permits the packet if a request was made; it does not block packets. You must create a firewall rule to block packets.
To configure these settings in mixed control, you must also enable these settings in the Client User Interface Mixed Control Settings dialog box.
To automatically allow communications for essential network services
In the console, open a Firewall policy.
On the Firewall Policy page, click Built-in Rules.
Check the options that you want to enable.
If you are prompted, assign the policy to a location.
See Editing a policy.
Article URL http://www.symantec.com/docs/HOWTO81172