Adding and Editing a Firewall Policy

Firewall policies allow you to block or allow certain types of network traffic not specified in a policy exception, and enable or disable firewall features. You can assign a policy to one or multiple profiles.

To add a policy:

• Networked Computers > Firewall > Policies > Add

1. Type a name for the policy.

2. Select a security level. The selected security level will not apply to traffic that meet the firewall policy exception criteria.

3. Select the firewall features to use for the policy.

Notes:

• The firewall violation notification message displays when the firewall blocks an outgoing packet. You can modify the message.

• Enabling all the firewall features grants the client users the privilege to enable/disable the features and modify firewall settings in the client console. You cannot use the OfficeScan server Web console to override client console settings the user configures.

• If you do not enable the features, the firewall settings you configure from the OfficeScan server Web console display under Network card list on the client console.

• The information under Settings on the client console's Firewall tab always reflects the settings configured from the client console, not the server Web console.

4. Under Exception, select the firewall policy exceptions. The policy exceptions included here are based on the firewall exception template.

5. You can modify an existing policy exception by clicking the policy exception name and changing the settings in the page that opens.

• Note: The modified policy exception will only apply to the policy to be created. If you want the policy exception modification to be permanent, you will need to make the same modification to the policy exception in the firewall exception template.

4. You can click Add to create a new policy exception. Specify the settings in the page that opens.

• Note: Similarly, the added policy exception will apply only to the policy to be created. To apply this policy exception to other policies, you need to add it first to the list of policy exceptions in the firewall exception template.

5. Click Save.

To edit an existing policy or save it as a new policy:

• Networked Computers > Firewall > Policies > {Policy Name}

1. You can modify the following:

2. Policy name

3. Security level

4. Firewall features to use for the policy

5. Firewall policy exceptions to include in the policy

• Edit an existing policy exception (click the policy exception name and change settings in the page that opens)

• Click Add to create a new policy exception. Specify the settings in the page that opens.

2. Save the settings.

3. Click Save to apply the modifications to the existing policy.

4. Click Save as New Policy to create a new policy based on the current settings in the page.