turning off symantec endpoint protection

'Customers often experience pain when increased IT resources are required to stay abreast of evolving endpoint threats,' said Christian Christiansen, vice president of security products and services at IDC.

Symantec Hosted Endpoint Protection also comes with advanced anti-virus, anti-spyware, firewall and host intrusion prevention technologies.

Has anyone configured SEP 12.1 SBE and left the native Windows firewall enabled? If so, how? And before you suggest I just enable the SEP firewall, I'd need a different policy for each server as there are different needs/services on each server so that just seems like a silly thing to do.Administrators can manage the service over a supported web browser and they will not need to be logged into the company's network to manage each worker computer. I've also confirmed that I'm setting up the native firewall correctly by doing the same config on another server that doesn't yet have SEP and traffic gets blocked. I've confirmed that the firewall is indeed not active by accessing the server on ports that should be blocked. I've pushed the client out to some of our servers and the client is modifying the native Windows firewall, Windows now shows that the native firewall is 'Active', but it's also 'managed by Symantec' and if you look at the list of active rules there are none. Specifically, The SEP Firewall policy on the management server does not have the 'Enable this Firewall Policy' checkbox checked - that is, the policy is disabled. It seems that SEP is disabling the native firewall. We have SEP 12.1 RU1 Small Business Edition and we're deploying to Windows 2008 R2 machines.

Turning off symantec endpoint protection