Endpoint Protection

How can I generate the report for the systems from SEPM where administrators are disabling the firewall manually ?

Go to monitors tab and select COMPUTER STATUS report. This will provide all the information related to features enabled, disabled, not installed or malfunctioning

The computer status report will only show what components are enabled/disabled, not who disabled them, if that's what you're after.

SEPM does have a report for this.

I don't need this what I am looking for to find out the administrators who are disabling the firewall manually from SEP interface either troubleshooting purpose or intentionally doing it.

It's not upto sepm, the main purpose SEPM reporting is to get logs related to SEP clients and their features installed, not the information of any user account.

Looking at this further, you can get this from the Monitors >> Logs tab by setting this filter:

 

You could then export to CSV and drop into Excel.

Outside of this, you can put in a suggestion/feature request:

Submit Symantec product suggestion/enhancement request