Rules are categorized as either server rules or client rules. Server rules are the rules that you create in Symantec Endpoint Protection Manager and that are downloaded to the Symantec Endpoint Protection client. Client rules are the rules that the user creates on the client.
Table: User control level and rule status describes the relationship between the client's user control level and the user's interaction with the firewall rules.
Table: User control level and rule status
Table: Server rules and client rules processing priority lists the order that the firewall processes server rules, client rules, and client settings.
Table: Server rules and client rules processing priority
On the client, users can modify a client rule or security setting, but users cannot modify a server rule.
If the client is in mixed control, users can create a client rule that allows all traffic. This rule overrides all server rules under the blue line.