How to check the firewall status and settings in F-Secure Elements EPP for Computers

In F-Secure Elements EPP for Computers, the firewall profile defined in the F-Secure Elements EPP portal sets the rules in the Windows Firewall on the endpoint computers, which means that the partner or admin must enable the Windows Firewall, so that the EPP firewall profile can be applied.

Activate the Windows firewall in Profiles

If the firewall is disabled in a specific profile, slide the slider to turn on the Apply F-Secure firewall profiles setting, then lock the setting.
If the firewall is disabled in the local settings, slide the slider to turn on Use Windows Firewall, then lock the setting.

Note: If the firewall is disabled by a GPO, the IT administrator needs to change the GPO settings. This is not possible through the portal.

Check the firewall status in Devices

In the portal, select Devices to open the page.
Select the organization and click on the filter icon (funnel shape).
Select the Firewall filter from the drop-down menu.
Select a relevant value. For example, in this case, Disabled by GPO.
A list appears with the relevant devices. It is also possible to apply another filter and/or change the category.

Important: If the Windows Firewall is disabled through a GPO, the firewall rules cannot be enforced. F-Secure is therefore unable to activate the Windows Firewall, and the firewall status remains disabled in the portal. If this is the case, go back to the GPO and enable the Windows Firewall.

Note: The "netsh" command never shows the real state of the firewall if a GPO is applied. The command only shows the local settings that could be different.