hello,
it's possible to create policy (in ERA), that revert firewall setting to default. Problem in client's pc's: after change firewall mode from learning to automatic - firewall blocking some traffic (all web application).
(How to do in client application - i know)