Can the F-Secure PSB Computer Protection profile be used to force control of the Windows Firewall on / off state? - F-Secure Community
<main> <article class="userContent"> <h3 data-version="3" data-article="000016070">Issue:</h3> <p>Can the Computer Protection profile be used to force the firewall on if the end user has turned it off?</p> <h3>Resolution:</h3> <p>The on/off state of the Windows Firewall can be fully controlled from the PSB portal settings profiles.<br>To modify the state of the firewall, do as follows:<br></p><ol><li>Log in to the PSB Management Portal</li><li>Go to the <b>Profiles </b>page</li><li>Click on the profile you want to edit (observe that profiles with the READ ONLY flag cannot be edited)</li><li>Select the <b>Firewall </b>page from the options on the left</li><li>Under <b>General settings</b>, set the <b>Use Windows Firewall</b>-setting to the desired mode (to prevent anyone from being able to modify the setting locally, click the lock-icon on the extreme right side of the setting, so that the lock is closed)</li></ol> The Windows Firewall will always follow the setting in Computer Protection. Users with sufficient rights can turn the firewall on or off directly through the firewall settings in Windows, but it will be forced back again in a few seconds time.<br><br>Leaving the setting unlocked in the settings profile will allow for local settings to override the value stated in the profile, see the following examples:<br><br>Profile setting: firewall ON, setting unlocked<br>Setting in Computer protection UI: OFF<br>Result: the Windows Firewall will be forced OFF<br><br>Profile setting: firewall ON, setting unlocked<br>Setting in Computer protection UI: ON<br>Result: the Windows Firewall will be forced ON<br><br>Profile setting: firewall ON, setting locked<br>Setting in Computer protection UI: Will be forced ON<br>Result: the Windows Firewall will be forced ON <p>Article no: 000016070</p> </article> </main>
