SEP allows the administrator to set firewall rules to "ASK" when the conditions were met, and the user response is saved to local firewall rules. For example, a user could elect to Allow an application and then this permission would be added to local policy.
In early versions of SEP, this functionality was open to all users on a system.
Release : 14.3 RU1 and later
This is a change in product design for SEP 14.3 RU1. In this version and later, this is expected behavior due to a change in the SEP Firewall.
Users must have local administrator rights to make changes to SEP Firewall policy on the local system in client versions 14.3 RU1 and later.