How to block a specific IP using Endpoint Protection Network Threat Protection

TECH94571
Last Updated September 27, 2019
Copy Article Title/URL
Feedback
Subscribe

You want to block network traffic associated with a specific IP address using the Symantec Endpoint Protection (SEP) Network Threat Protection Firewall component. How can this be accomplished?
 

Edit the firewall policy associated with the clients to add a corresponding rule as follows:

  • Open the Symantec Endpoint Protection Manager (SEPM), click the Policies tab, and edit the policy you wish to change
  • Add a blank rule
  • Modify the “Host” properties so that the “Source/Destination” IP is the address you wish to block (Local/Remote is less generic, and requires the local address of the client on which the rule should be applied)
  • Change the “Action” to Block
  • Save and deploy the policy as needed.

 

 


This will block all incoming and outgoing traffic associated with the specified IP address.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Imported Document ID: TECH94571
Legacy ID: 2009061513570448

Thanks for your feedback. Let us know if you have additional comments below. (requires login)

    © 1995-2019 Symantec Corporation