Firewall component not present after SESC agent install or upgrade on Windows Server

Products

• Endpoint Security Complete

Issue/Introduction

After installing the Symantec Endpoint Security (SES) agent on a Windows Server, the Firewall module may appear missing. This occurs because the default feature selection policy for servers excludes the Firewall component to maintain compatibility with native server roles.

Environment

Windows Server including 2019, 2022, 2025. 

Cause

The agent was deployed using the default feature selection policy for 'Server', which does not include the Firewall module by design.

Resolution

In order to include the Firewall on a server installation, modify the Feature Selection Policy for 'Server' by toggling the Firewall component to 'On'. 

Additional Information

Using the Feature Selection policy to assign protection features to Windows devices