Endpoint Protection

Hi,

I'm currently playing around with the Application & Device Control Policy in SEP. Unfortunately you have to install the FireWall Component & we already use Windows Firewall . I've had no policy enabled , a policy enabled with no rules & still SEP blocks File Sharing to machines with the component enabled.

Is there anyway to have SEP Firewall component installed but have it do nothing , ie allow all access. We have Windows Firewall so don't require SEP Firewall at the moment , but I do want to use the Application & Device Control components.

You can go to Policies->Firewall Policy-> Edit firewall policy->Rules

You can see which rules are applied. There is one called as block all other traffic, you can uncheck that. And uncheck all other rules that you think are un-necessary.

best,
Aniket

Hello brav.
Sep firewall give access standart file sharing already.
if you have unmanaged client you must to change "network threat protection" option and give sharing access.
You coulnd't use file sharing with managed client without sep firewall rule?
Thanks.
Fatih

In this case the best you can do is Create a blank firewall rule and allow all and move the rule the top of the rules.

Go to Policy--> Firewall rule--->Edit Firewall Policy---Rules

Click on add a Blank rule and select allow all. In this case the Componet will be active but it will be allow all ( SEP Firewall be cosmetic)

 

Thanks for the responses.

Aniket, I created a new policy and deleted ALL rules , so none should be applied surely ?

Yes, Fatih , I cannot use file sharing with a managed client without sep firewall rule.

I don't understand why, when no rules are set , that file sharing is blocked. If I disable SEP , then everything is ok.

Hello again Brav.
As you well know all firewall rules works on Block. if i were you i create a new firewall rule and delete all block rules. and create file transfer rule with all access.
and are your all clients cannot use file sharing? or only a few clients in a group?
Thanks

It's just the 1 client that is assigned to the group , I'm currently testing application & device control & have just noticed this on the only machine with SEP Firewall Component Installed.

I'll give that a go & post back if it works ....

Okay, I've managed to get it working.

I've created a new policy , deleted all rules BUT enabled All Smart Traffic Filtering . I can now access local shares.

Thanks