After upgrade or install of Symantec Endpoint Protection client version 14.2 RU1 or newer the Windows Firewall options are grayed out and remain unavailable when you disable the SEP client firewall component from the tray icon.
The Windows Firewall options are grayed out and not available when the SEP Firewall is disabled by the tray icon.
This is under investigation
This issue is fixed in Symantec Endpoint Protection 14.2.5323 (14.2 RU2). For information on how to obtain the latest build of Symantec Endpoint Protection, see Download the latest version of Symantec Endpoint Protection.