Using Symantec System Center 6.x or later to distribute a Symantec Client Firewall policy

Symantec.com > Enterprise > Support > Knowledge Base

Using Symantec System Center 6.x or later to distribute a Symantec Client Firewall policy

Question/Issue:
You need to create a custom Symantec Client Firewall policy file and use Symantec System Center 6.x or later to distribute this policy to client computers.

Solution:

Before you begin: You must have the following programs installed:

Symantec AntiVirus Corporate Edition server
The correct version of Symantec System Center for your version of Symantec AntiVirus Corporate Edition
For help with this, read the document Determining the version of Symantec System Center.
Symantec AntiVirus Corporate Edition managed client on the same computer as Symantec Client Firewall

If you do not have this software installed, you cannot manage Symantec Client Firewall clients.

To distribute a policy, you must first create a Symantec Client Firewall policy file.
To learn how to do this, read the document for your program version:

Creating a custom policy for Symantec Client Firewall 5.x and 7.x
Creating a custom policy for Symantec Client Firewall 8.x or Symantec Client Security 3.0

After you create the policy file, use Symantec System Center to distribute the new policy to clients. Follow the steps that apply to your situation.

To use Symantec System Center to distribute a policy to all managed clients in the server group

Start Symantec System Center.
Unlock the server group.
Right-click the server group, and then click All Tasks > Symantec Client Firewall > Update All Policy Now.
Find and select the policy file that you want to distribute, and click Open.
Click OK when you see the "SCF Management Snap-in has started a policy update..." prompt.

To use Symantec System Center to distribute a policy to all managed clients in a client group

Start Symantec System Center.
Unlock the server group.
Right-click the client group, and then click All Tasks > Symantec Client Firewall > Update Client Policy Now.
Find and select the policy file that you want to distribute, and click Open.
Click OK when you see the "SCF Management Snap-in has started a policy update..." prompt.

To use Symantec System Center to distribute a policy to a parent server's unassigned clients

Start Symantec System Center.
Unlock the server group.
Right-click the parent server, and then click All Tasks > Symantec Client Firewall > Update Client Policy Now.
Find and select the policy file that you want to distribute, and click Open.
Click OK when you see the "SCF Management Snap-in has started a policy update..." prompt.

Note: An unassigned client is a managed client that is not a member of a client group.

References:
If you are using Symantec System Center 5.x, read the document Using Symantec System Center 5.x to distribute a Symantec Client Firewall 5.x policy.

Document ID: 2005031709504448
Last Modified: 05/26/2006
Date Created: 03/17/2005
Operating System(s): Windows NT, Windows 2000, Windows XP Professional, Windows Server 2003 32-bit Edition
Product(s): Symantec Client Firewall 7.1, Symantec Client Firewall 8.0, Symantec Client Firewall 8.7, Symantec Client Security 3.0, Symantec Client Security 3.1
Release(s): SCF 7.1, Symantec Client Firewall 8.7, Symantec Client Firewall 8.x [All versions], Symantec Client Security 3.1, Symantec Client Security 3.x [All versions]