ᗺrian
I can't see how to "withdraw" the policy in the hostedendpoint.spn.com console but:
I enabled the Smart Firewall option in the imported endpoint policy => client PC now shows Smart Firewall ticked/checked
I disable the Smart Firewall option in the imported endpoint policy => client PC now shows red cross against Smart Firewall but Windows 7 Action centre then says Network Firewall (Important) with options to Turn on Windows Firewall, Turn on Symantec Endpoint Protection.cloud or get a different firewall online
(turning on the Windows firewall does not appear to do anything because the Action Centre notification doesn't go away)
Windows Firewall shows firewall disabled but "these settings are being managed by... Endpoint protection.cloud"