How to unblock a port using the SEP firewall policy.

Situation

When the cloud version of Symantec Endpoint Protection Small Business Edition cloud (SEP SBE) is installed on a computer it will disable the Windows firewall and take over firewall functionality. As the Windows firewall cannot be used after installing SEP SBE Cloud, custom firewall rules may need to be created to allow necessary communications for applications in the environment.

Solution

From the SEP SBE cloud management console. 

1: Open the Policies tab and select Endpoint Protection on the left navigation pane. If you are still using the default Endpoint Protection policy create a new one as the default policy is Read-Only (as described in How to create custom Antivirus (AV) policies).

2: Under Network Protection - Expand Firewall Rules and click Add Rule.

3: In the dialog that Opens name the rule as desired and set the rule parameters allow necessary communication.

• Connections: Allow or Block
• Connection Type: Inbound, Outbound or Inbound and Outbound
• Computers: Any Computers, Any Computer in the Local Subnet or Choose Computers (From Choose Computers you may set the computer by it's Host Name, IP Address Range or Network Address by IP and Subnet).
• Communications:TCP, UDP, TCP and UDP, ICMP, ICMPv6 or All. You may then select All Types (i.e. all ports) Or from the Custom List select Known Ports from List, Individually Specific Ports or Port Range. You may also specify if the port is Local or Remote.

4: Click Ok to close the dialog and then select the Group(s) you wish to be affected by this policy and click Save & Apply.