Issue: Can I configure the Elements Endpoint Protection (EPP for Computers or EPP for Servers) profile to force the Windows Firewall to turn ON if the end-user has turned it OFF? Resolution: The ON/OFF state of the Windows Firewall can be fully controlled from the Elements Endpoint Protection profile settings in Elements Endpoint Protection portal..To modify the state of the firewall, you can do the following: Log in to the Elements Security CenterClick on See more details under Endpoint ProtectionGo to the Profiles pageClick on the profile you want to edit (observe that profiles with the READ ONLY flag cannot be edited)Select the Firewall page from the options on the leftUnder General settings, set the Use Windows Firewall-setting to the desired mode (to prevent anyone from being able to modify the setting locally, click the lock icon on the extreme right side of the setting, so that the lock is closed) The Windows Firewall will always follow the setting in Elements Endpoint Protection. Users with sufficient rights can turn the firewall on or off directly through the firewall settings in Windows, but it will be forced back again in a few seconds.Leaving the setting unlocked in the settings profile will allow for local settings to override the value stated in the profile, see the following examples:Profile setting: Firewall ON, setting unlockedSetting in Computer Protection UI: OFFResult: the Windows Firewall will be forced OFFProfile setting: Firewall ON, setting unlockedSetting in Computer Protection UI: ONResult: the Windows Firewall will be forced ONProfile setting: Firewall ON, setting lockedSetting in Computer Protection UI: Will be forced ONResult: the Windows Firewall will be forced ONNote: Windows Firewall settings and rules created via Group Policy Objects (GPO) can not be overridden by Elements Endpoint Protection profiles.