SES Quarantine policy does not honor custom firewall rules

Products

• Endpoint Security Complete

Issue/Introduction

The Symantec Endpoint Security (SES) Quarantine firewall policy is not working as expected. Custom allow rules in the Quarantine Firewall Policy appear to be ignored when the client is quarantined.

Editing the default quarantine firewall policy won't work.

Environment

Release : 14.3 RU5 

 

Cause

When a SESC client is manually quarantined, it will use a default quarantine firewall policy. Any additional or custom rules will be ignored. 

Resolution

The built-in Quarantine location will not accept any additional/ custom rules in the Firewall policy.

If you would like to use custom firewall rules, a new Policy Target Rule needs to be set up:

Using policy target rules