When installing a client package without NTP on a Windows 7 computer, if the group in which the Symantec Endpoint Protection (SEP) client checks in with on the SEPM has a Firewall Policy it will disable the Windows Firewall anyway.
This problem is fixed in Symantec Endpoint Protection 11 RU6 MP3. For information on how to obtain the latest build of Symantec Endpoint Protection, read Obtaining an upgrade or update for Symantec Endpoint Protection.
http://www.symantec.com/docs/TECH103088
Applies To
Windows 7 64-Bit and Windows Server 2008 R2