Allowing Ping with an unmanaged Symantec Endpoint Protection client firewall

Products

• Endpoint Protection

Issue/Introduction

After inspecting your environment, you discovered that the SEP firewall is preventing PING testing on unmanaged clients, which you would like to enable using SEP policies. 

 

Environment

SEP version 14.x

 

Cause

SEP client is designed to prevent such traffic from getting through, and to allow such behavior, a particular rule under SEP Firewall policy must be created.

 

Resolution

To add a rule in the firewall polices:

1. Open the Symantec Endpoint Protection client interface
2. Select Status
3. Click Options for "Network Threat Protection"
4. Select Configure Firewall Rules
5. Click Add
6. Type a name for the new rule (Example: "Allow ICMP" )
7. Under "Action", select Allow this traffic
8. Select the network interface card that you want this rule applied to.
   • Note: If you want this rule to always run, select Apply this rule while the screen saver is On and/or Off.
9. Go to the Hosts tab
10. Select Apply this rule to and select where you want this rule applied. (The default is "All hosts")
11. Go to the Ports and Protocols tab
12. Click on the Dropdown menu and select the ICMP
    • In the sub menu, select Echo Request – 8 and Echo Reply - 0 (you may select others that you need for your environment)
13. Click OK