Here is some information you can use for NTP:

Symantec Endpoint Protection 11.0 protects endpoint computing devices from viruses, threats, and risks, and provides three layers of protection to your endpoint computing devices. The layers are network threat protection, proactive threat protection, and antivirus and antispyware protection. Network threat protection blocks threats from accessing your computer by using rules and signatures. Proactive threat protection identifies and mitigates the threats based on the threats’ behavior. Antivirus and antispyware threat protection identifies and mitigates the threats that attempt to or have gained access to your computers by using the Symantec signatures. The Symantec Endpoint Protection client firewall provides a barrier between the computer and the outside network. The client firewall prevents unauthorized users from accessing the computers and the networks that connect to the Internet, detects possible hacker attacks, protects personal information, and eliminates unwanted sources of network traffic. The firewall also protects against network threats and malware that attempt to proliferate in your network, such as bots. All the information that enters or leaves the client computer must pass through the client firewall, which examines the information packets. The client firewall blocks packets that do not meet the specified security criteria.

Firewall Policies
Firewall policies consist of one or more rules that work together to allow or block users from accessing the network. Firewall policies include the following elements:

* Firewall Rules
* Stateful Inspection
* Rule Priority Number
* Control Type
* Default Firewall Rules
* Smart Traffic Filtering
* NetBIOS and Token Rings
* Stealth Settings

You can refer to the document below:

Symantec Endpoint Protection 11.0 Network Threat Protection (Firewall) Overview and Best Practices White Paper

http://service1.symantec.com/support/ent-security....

Network Threat Protection does not appear in the user interface after installing Symantec Endpoint Protection

http://service1.symantec.com/support/ent-security....

And its always advised to install only Antivirus& Antispyware on Server Operating Systems. As Proactive Threat Protection is not supported on a Server OS [ even if its installed, it will always be disabled] .

Hope this helps.

Aniket Amdekar