Remove local firewall rules using ESMC

[kapela86 10]

I have a policy with some Endpoint Security settings and firewall rules that is assigned to dynamic group "Windows (desktops)". I also use this policy as a default settings in Endpoint Security installer that I use to install on computers in my organization. I just noticed on computers that firewall rules are duplicated, and upon further investigation I found out that first set of rules is applied from ESMC policy and second is from local rules that are created by installer. How can I remove those local rules without going to every PC and removing it manually?

[Marcos 5,070]

You can accomplish this by selecting local settings to be replaced with policy settings in the appropriate policy:

 

[kapela86 10]

Will this remove "EVERY" local rule, even those created by users?

[Marcos 5,070]

It should replace all rules on clients.

[kapela86 10]

Is there a way to get firewall rules from every computer in batch? I mean, I don't want to manually go through every computer on "Computers" list and use "Configuration -> Request configuration" and then manually analyze it to see if there are some local rules.

[Marcos 5,070]

It's not possible to view all custom rules created on machines merged in one window. As you wrote, it's possible to view them only in the configuration panel in client details.

[kapela86 10]

So there's no way to check local firewall rules from ESMC?

[Marcos 5,070]

You can check local firewall rules in the Configuration panel in details of particular clients.