When disabling Symantec Endpoint Protection (SEP) Firewall policy from Symantec Endpoint Protection Manager (SEPM) and updating policy on the SEP client, the Windows Firewall on client shows "These settings are being managed by vendor application Symantec Endpoint Protection” until the computer is restarted.

SEP Firewall is not releasing ownership to the Windows Firewall when the SEPM > Firewall Policy > Windows Integration > Disable Windows Firewall is set to “No Action.”

This issue is fixed in Symantec Endpoint Protection 14 RU1.  For information on how to obtain the latest build of Symantec Endpoint Protection, read
TECH 103088: Download the latest version of Symantec Endpoint Protection