EMEA Endpoint Management and Mobility Group (EMM)

Hi

I have some infection of virus W32.sality on two server so I applied autorun.inf policy on that server but for that I want enable ADC component on client side while enabling ADC component I get prompt enable firewall and intrusion prevention also but I can’t enable on server.

So it is possible to disable ips and firewall from sepm console if I enable all component on client side and it will not impact those two policy component on my server

Symantec client version 11.6300

Os windows server 2003

A&DC in SEP11 requires NTP components for it to work.  You only get full separation of the components in SEP12.1 (allowing you to install A&DC without FW or IPS).

That said, it's entirely possible to install all components of the SEP Client and disable the parts you don't need (i.e. FW and IPS) by withdrawing the FW and IPS policies from the group containing the target SEP Clients

Hello,

I agree above. 

You have currently installed SEP 11.0.6300.

Here, For Application and Device Control Feature to work, you would require Network Threat Protection Feature installed and Enabled.

Check these Articles:

Symantec Endpoint Protection 11.0 Network Threat Protection (Firewall) Overview and Best Practices White Paper

http://www.symantec.com/docs/TECH116730

Best Practices for Deploying Symantec Endpoint Protection's Application and Device Control Policies

http://www.symantec.com/docs/TECH181679

Hope that helps!!