ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

Windows Defender Security Center reports "Firewall is deactivated" after install of Endpoint Protection


Article ID: 169535


Updated On:


Endpoint Protection


After the Symantec Endpoint Protection (SEP) 14 client is installed on Windows 10 (1703 Creators Update), Microsoft Windows Defender Security Center reports that the firewall feature has been deactivated.

This occurs even though the SEP Firewall is installed and is functional.

"Firewall is deactivated" is seen in Windows Defender Security Center.


Microsoft Windows Defender is causing this issue.


Windows 10 Creators Update (1703)


Disable Windows Defender to suppress this notification. 

Disable Windows Defender using Group Policy

  1. In the Windows Start menu or search box, enter gpedit.msc, and then press Enter.
    The Local Group Policy Editor opens.

    Note: If you see the User Account Control prompt, click Yes to continue.
  2. In the Group Policy Editor, navigate to Computer Configuration > Administrative Templates > Windows Components > Windows Defender.
  3. In the right pane, look for the policy, Turn off Windows Defender.
  4. Double-click on Turn off Windows Defender to open its properties.
  5. Choose Enabled, and then click Apply.

Disable Windows Defender in the Windows Registry

  1. In the Windows Start menu or search box, enter regedit.exe, and then press Enter.
    The Registry Editor opens.
  2. Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender.
  3. In the right pane, right-click in the empty area, and then click New > DWORD (32-bit) Value.
  4. Enter DisableAntiSpyware, and press Enter.
  5. Double-click DisableAntiSpyware, and change "Value data" to 1.
  6. Restart the computer.
    Windows Defender is now disabled.