About firewall server rules and client rules

Article:HOWTO81232  |  Created: 2012-10-24  |  Updated: 2013-10-07  |  Article URL http://www.symantec.com/docs/HOWTO81232
Article Type
How To


Subject


About firewall server rules and client rules

Rules are categorized as either server rules or client rules. Server rules are the rules that you create in Symantec Endpoint Protection Manager and that are downloaded to the Symantec Endpoint Protection client. Client rules are the rules that the user creates on the client.

Table: User control level and rule status describes the relationship between the client's user control level and the user's interaction with the firewall rules.

Table: User control level and rule status

User control level

User interaction

Server control

The client receives server rules but the user cannot view them. The user cannot create client rules.

Mixed control

The client receives server rules. The user can create client rules, which are merged with server rules and client security settings.

Client control

The client does not receive server rules. The user can create client rules. You cannot view client rules.

Table: Server rules and client rules processing priority lists the order that the firewall processes server rules, client rules, and client settings.

Table: Server rules and client rules processing priority

Priority

Rule type or setting

First

Server rules with high priority levels (rules above the blue line in the Rules list)

Second

Client rules

Third

Server rules with lower priority levels (rules under the blue line in the Rules list)

On the client, server rules under the blue line are processed after client rules.

Fourth

Client security settings

Fifth

Client application-specific settings

On the client, users can modify a client rule or security setting, but users cannot modify a server rule.

Warning:

If the client is in mixed control, users can create a client rule that allows all traffic. This rule overrides all server rules under the blue line.

See Managing firewall rules

See Changing the order of firewall rules.

See Changing the user control level


Legacy ID



v9661340_v81626096


Article URL http://www.symantec.com/docs/HOWTO81232


Terms of use for this information are found in Legal Notices