Hi,

I would recommend you to keep the windows firewall running [ with necessary exceptions  ].

As SEP is not a part of Windows OS, it can not control the behaviour of Windows Components.

Aniket

I might need to do this via Group Policy, but unfortunately it is complicated by the fact that there are a number of PCs which special configurations/software that require them to operate with Firewall OFF.  I can probably configure exceptions, or maybe put those computers into their own OU and block the enforcing of Windows Firewall ON, but will need to investigate my options there.  I guess it just would have been "cleaner" (or "easier") if I could enforce this via some kind of option in the Symantec settings.

I think running SEP firewall with different rule sets for office and out of office locations will be ideal for you. 

I think it's can be achieved by to modify regedit
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\
Parameters\FirewallPolicy\StandardProfile]  
"EnableFirewall"=dword:00000000
if you want to be able to Firewall , please modify the "dword value" with 1and vice-versa

you can use "Modify regedit value" in the Action  in HI policy on SEPM control to accomplish it

must log off and then log on to apply this

That would add to the complexity of the solution by adding another policy that needs to be checked.

Please refer to the instructions below to disable the Windows firewall with the help of group policy:

1. Create a new Group Policy object, and give the object a descriptive name (for example, ITS-Turn off Windows Firewall).
2. Select the newly created group policy.
3. Right-click on the newly created policy and select Edit.
4. Expand the Computer Configuration folder, then the Administrative Templates folder.
5. Expand the Network folder, then the Network Connections folder, then the Windows Firewall folder.
6. Select the Standard Profile folder.
7. Double-click the Windows Firewall: Protect all network connections option.
8. Select Disabled, then click OK.
9. Select the Domain Profile folder.
10. Double-click the Windows Firewall: Protect all network connections option.
11. Select Disabled, then click OK.
12. Close the Group Policy dialog box.
13. In the Security Filter section, click Add.
14. Search for the objects that this group policy will be applied to, then click OK.
15. Close the Group Policy editor.

http://www.utexas.edu/its/support/topics/disable-w...

Aniket