Firewall to default Policy

[BioKR 0]

hello,

it's possible to create policy (in ERA), that revert firewall setting to default. Problem in client's pc's: after change firewall mode from learning to automatic  - firewall blocking some traffic (all web application).  

(How to do in client application - i know)

[Marcos 4,838]

Create a new policy that will have all firewall settings marked with the force flag to ensure it will supersede other possible policies that may be applied on the clients. When creating a new policy, all settings are set to defaults.

If a rule is blocking certain communication that should be allowed, you can run the Firewall troubleshooting wizard on a client to get a list of recently blocked communications and to create the appropriate allowing rule with a few clicks.

[Miami 4]

I would just add that it's good to create a separate static group just for testing purposes (with attached FW - learning mode policy). For testing/learning purposes, you would move a computer into this group, check learned rules and when everything is fine, just change the main (default) FW policy and move that computer back to it's default group.