Configuring firewall settings for mixed control

You can configure the client so that users have no control, full control, or limited control over which firewall settings they can configure.
For the Mac firewall, the user cannot create firewall rules or change settings regardless of the client user interface settings. The options do not ever appear in the client user interface.
Server control
For Windows, the user cannot create any firewall rules or enable firewall settings.
For Mac, the user cannot enable or disable the firewall.
Client control
For Windows, the user can create firewall rules and enable all firewall settings.
For Mac, the user can enable and disable the firewall.
Mixed control
For Windows, the user can create firewall rules. You decide which firewall settings the user can enable.
For Mac, you decide whether the user can enable or disable the firewall.
The firewall is only available for the Mac client as of version 14.2.
  1. To configure firewall settings for mixed control
  2. In the console, click
    Clients
    .
  3. Under
    Clients
    , select the group with the user control level that you want to modify.
  4. On the
    Policies
    tab, under
    Location-specific Policies and Settings
    , under a location, expand
    Location-specific Settings
    .
  5. To the right of
    Client User Interface Control Settings
    , click
    Tasks > Edit Settings
    .
  6. In the
    Control Mode Settings
    dialog box, click
    Mixed control
    , and then click
    Customize
    .
  7. On the
    Client/Server Control Settings
    tab, under the
    Firewall Policy
    category, do one of the following tasks:
    • To make a client setting available for the users to configure, click
      Client
      .
    • To configure a client setting, click
      Server
      .
  8. Click
    OK
    .
  9. Click
    OK
    .
  10. For each firewall setting that you set to
    Server
    , enable or disable the setting in the Firewall policy.