Video Screencast Help
Symantec Appoints Michael A. Brown CEO. Learn more.

Windows 7 Endpoint client take over control by SEPM

Created: 19 Mar 2013 • Updated: 27 Mar 2013 | 23 comments
This issue has been solved. See solution.

Hello,

Please see below screenshot and sorry for Chinses, but I think you know what is it, my question is how to disable this ? I tried remove firewall policy in group via SEPM, but sill no luck.

Thanks

 

Operating Systems:

Comments 23 CommentsJump to latest comment

Ambesh_444's picture

Hi,

Please refer this.

Open your sep client ==> Click on option right pane of virus and spyware protection ==> Then salect Enable on virus and spyware protection,

I hope you it will work.

 

Thank& Regards,

Ambesh

"Your satisfaction is very important to us. If you find above information helpful or it has resolved your issue. Please don't forget to mark the thread as solved."

Rafeeq's picture

Hi Check this documents. its working as designed. You have installed Symantec with network threat protection so its controlling the win firewall. if you want to disable it go to control pannel , select SEP

select modify, select NTP and remove. reboot after uninstall. 

 

Advanced Settings for Windows 7 Firewall indicate that it is on, even when Symantec Endpoint Protection (SEP) Network Threat Protection (NTP) is installed.

http://www.symantec.com/business/support/index?page=content&id=TECH123729
AjinBabu's picture

Hi,

It looks you have installed Firewall module on your System and if you install on a windows 7 machines you may get a message like this. To remove the firewall component from the machine and let us know the results

Regards

Ajin

leiw's picture

to Rafeeq,

I can't see SEP in Windows 7 control panel.

Thanks

Rafeeq's picture

Mean to say in add/remove programs..if you dont see it then call support and get cleanwipe and remove the SEP and install only AV/AS components

Mithun Sanghavi's picture

Hello,

What version of SEP 12.1 are you running?

Check these Articles:

Windows 7 Firewall indicate that "These Settings are being managed by vendor application Symantec Endpoint Protection", even when Symantec Endpoint Protection (SEP) 11.0 Network Threat Protection (NTP) is not installed.

https://www-secure.symantec.com/connect/articles/windows-7-firewall-indicate-these-settings-are-being-managed-vendor-application-symantec-en

Advanced Settings for Windows 7 Firewall indicate that it is on, even when Symantec Endpoint Protection (SEP) Network Threat Protection (NTP) is installed.

http://www.symantec.com/docs/TECH123729

The behavior of Windows 7 in regards to 3rd party firewalls (such as SEP) differs slightly than previous versions of Windows. In Windows 7, Microsoft changed Security Center to Action Center. In Action Center, a more universal interface was created for protection technology (Firewall, Antivirus, etc).Windows Firewall is indeed turned off when SEP NTP is enabled, indicated by the Installed Firewall list, as well as the General Firewall status section indicating that firewall rules are being managed by SEP. To verify the true Windows Firewall status: Open Action Center -> Expand "Security". Find line item "Network Firewall On". Below is a link "View installed firewall programs": Symantec Endpoint Protection is listed as installed and On, Windows firewall is listed as installed and Off."

Hope this clarifies this for you.!!!

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

leiw's picture

Hello,

Sorry, I can't uninstall the NTP, because it is deployed by package, so I followed below guideline to disable firewall policy in SEPM, but still cannot disable that issue, please help.

https://www-secure.symantec.com/connect/articles/w...

Rafeeq's picture

is it grayed out ? you should uncheck the inheritance for that group and you should see the option to uncheck enable this policy. Additionally you can withdraw the policy from the group.

click on policy , select fw, at the bottom u will get option to withdraw, select that, select group, thats it.

leiw's picture

Hi Rafeeq,

I done yours already, but still cannot disable it, what time I have to wait the policy assign to Windows 7 PC ?

We are using SEPM 12.1.24 and SEP 12.1.1101.401

Thanks

Rafeeq's picture

just right click on that client ( task bar icon) and do update policy.

leiw's picture

The firewall policy already removed from group and then right click that client to Run Command on Computers > Update Content, but no luck..

AjinBabu's picture

Hi ,

You can also remove the clients firewall feature by upgrade package. It will work irrespective of inheritance.

Regards

Ajin

W007's picture

Hello,

Does the sep client received latest policy ?

 

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

leiw's picture

Do you mean Monitor > Policy, the date is 03/21/2013 ... not today

W007's picture

no,

you will check both side sep client and sepm server.

You can check sep client side

https://www-secure.symantec.com/connect/forums/how-check-client-policy-number-sepm-console-without-logging#comment-6682721

and same policy are available in SEPM console ->clients-> sep client group

Check both policy same or not

 

 

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Rafeeq's picture

check if the client is communicating with SEPM. 

Help and support - troubleshooting- does it show SEPM ip? might run a repair of sep so that it can take the policy immediately

W007's picture

hello,

Try this setting i have tested in in test envirement

 

AttachmentSize
How to enable Windows firewall setting in Windows 7 machine.docx 257.77 KB

 

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

SOLUTION
leiw's picture

To ManishS,

Thank for your guideline, the issue still occur after I finished that setting.

W007's picture

hello,

I have tested in my test envirement setting are worked perfectly.

Sep client and sepm server are same verson ?

Does sep client received latest policy ?

I think you don't  withdraw FW policy ?

 

 

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

W007's picture

Ahhh.

Glad to hear your problem are solved wink

 

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.