Endpoint Protection

Over the last week I've been using SEPM v12 to update ~30 servers running a mix of 2003 R2, 2008x86, and 2008 R2 machines from SEP v11.x to 12.1.  Updates had been running smoothly until today when two servers (both 2008x86 standard machines running SQL 2005 Standard) auto-enable windows firewall, which was previously disabled before pushing the update.  The v12 package only included anti-virus & spyware protection and was set as silent install with no-reboot.  I have pushed updates on other 2008x86 servers an have not had the same issue; windows firewall has remained disabled.  We also have a dev environment with a dev SQL 2005 machine running 2008 R2; the firewall remained turned off after the update.

Has anyone seen this issue before, know the cause, fix, etc?

Hello,

Was there Network Threat Protection installed in SEP 11.x before?

I wonder since the Network Threat Protection was previously installed and now it isn't installed in SEP 12.1, the Windows Firewall might have got enabled.

About Windows Firewall and Symantec Endpoint Protection's NTP

http://www.symantec.com/docs/TECH97986

Advanced Settings for Windows 7 Firewall indicate that it is on, even when Symantec Endpoint Protection (SEP) Network Threat Protection (NTP) is installed.

http://www.symantec.com/docs/TECH123729

How to keep Windows 2008 Small Business Server firewall from showing critical when SEP's Network Threat Protection is enabled

http://www.symantec.com/docs/TECH95700