Community
User Guides
Support
Community
Help Forums
English Forum
General
About our Community
General Discussion
News and Feedback
Products
F-Secure SAFE
F-Secure FREEDOME
F-Secure KEY
F-Secure SENSE Router
F-Secure ID PROTECTION
Other products
Beta programs
Feature Requests
Finnish Forum (Tukifoorumi)
Tuotteet Kotiin
F-Secure SAFE
F-Secure FREEDOME
F-Secure KEY
F-Secure SENSE Router
F-Secure ID PROTECTION
Muut tietoturvatuotteet
Support Articles
Language
English
Suomi
Deutsch
Français
日本語
Svenska
Dansk
Italiano
Nederlands
Norsk
Polski
中文 (繁體)
Products & Services
F-Secure TOTAL
F-Secure SAFE / Internet Security / Anti-Virus
F-Secure FREEDOME
F-Secure KEY
F-Secure SENSE Router
F-Secure ID PROTECTION
Other products
Common topics
User Guides
Support
Login
|
Register
Can the F-Secure Elements Endpoint Protection profile be used to force control of the Windows Firewall ON / OFF state? - F-Secure Community
<main> <article class="userContent"> <h3 data-version="5" data-article="000016070" data-id="issue">Issue:</h3> <p>Can I configure the Elements Endpoint Protection (EPP for Computers or EPP for Servers) profile to force the Windows Firewall to turn ON if the end-user has turned it OFF?</p> <h3 data-id="resolution">Resolution:</h3> <p>The ON/OFF state of the Windows Firewall can be fully controlled from the Elements Endpoint Protection profile settings in Elements Endpoint Protection portal..<br><br>To modify the state of the firewall, you can do the following:<br></p><ol><li>Log in to the Elements Security Center</li><li>Click on <b>See more details</b> under Endpoint Protection</li><li>Go to the <b>Profiles </b>page</li><li>Click on the profile you want to edit (observe that profiles with the READ ONLY flag cannot be edited)</li><li>Select the <b>Firewall </b>page from the options on the left</li><li>Under <b>General settings</b>, set the <b>Use Windows Firewall</b>-setting to the desired mode (to prevent anyone from being able to modify the setting locally, click the lock icon on the extreme right side of the setting, so that the lock is closed)</li></ol> The Windows Firewall will always follow the setting in Elements Endpoint Protection. Users with sufficient rights can turn the firewall on or off directly through the firewall settings in Windows, but it will be forced back again in a few seconds.<br><br>Leaving the setting unlocked in the settings profile will allow for local settings to override the value stated in the profile, see the following examples:<br><br>Profile setting: Firewall ON, setting unlocked<br>Setting in Computer Protection UI: OFF<br>Result: the Windows Firewall will be forced OFF<br><br>Profile setting: Firewall ON, setting unlocked<br>Setting in Computer Protection UI: ON<br>Result: the Windows Firewall will be forced ON<br><br>Profile setting: Firewall ON, setting locked<br>Setting in Computer Protection UI: Will be forced ON<br>Result: the Windows Firewall will be forced ON<br><br><b>Note:</b> Windows Firewall settings and rules created via Group Policy Objects (GPO) can not be overridden by Elements Endpoint Protection profiles. <p>Article no: 000016070</p> </article> </main>