You can configure the client so that users have no control, full control, or limited control over which firewall settings they can configure.
To configure firewall settings for mixed control
In the console, click Clients.
Under Clients, select the group with the user control level that you want to modify.
On the Policies tab, under Location-specific Policies and Settings, under a location, expand Location-specific Settings.
To the right of Client User Interface Control Settings, click Tasks > Edit Settings.
In the Control Mode Settings dialog box, click Mixed control, and then click Customize.
On the Client/Server Control Settings tab, under the Firewall Policy category, do one of the following tasks:
For each firewall setting that you set to Server, enable or disable the setting in the Firewall policy.