In the Endpoint Security cloud console you have changed Firewall policy to allow "All Users" to disable the firewall and when opening the client, the users are not able to disable the firewall as expected.
If you unlock the firewall policy this works and resolves the issue and is not by design.
The SEP client code is not responding to the the policy correctly.
Symantec is currently investigating this issue. This KB document will be updated when the fixed version of the client is released. To work around the issue you can unlock the Firewall policy.
ESCRT-8080