In Symantec Endpoint Protection 11 MR2 MP1 and above, limited User accounts were able to disable SEP's firewall component from the GUI. (In the Network Threat Protection section, click on Options -> Disable Network Threat Protection).
This capability has been lost by upgrading to SEP 12.1: only Power Users and Administrators have the ability to disable NTP, even when given the permission in the organizations's policy. (Server Control, Client User Interface Settings, "Allow user to enable and disable firewall")
This issue is corrected in Symantec Endpoint Protection 12.1 Release Update 1 Maintenance Patch 1 (SEP 12.1 RU1 MP1). Please upgrade to the latest available release of SEP to take advantage of this and other enhancements and improvements.
Imported Document ID: TECH170246
Subscribing will provide email updates when this Article is updated. Login is required.