{"id":8097,"date":"2026-10-18T22:02:40","date_gmt":"2026-10-18T19:02:40","guid":{"rendered":"https:\/\/support.withsecure.com\/?post_type=support_article&p=8097"},"modified":"2026-10-18T22:02:40","modified_gmt":"2026-10-18T19:02:40","slug":"how-to-lock-client-security-or-server-security-firewall-profile-so-that-a-local-user-cannot-change-it","status":"publish","type":"support_article","link":"https:\/\/support.withsecure.com\/de\/support-articles\/how-to-lock-client-security-or-server-security-firewall-profile-so-that-a-local-user-cannot-change-it\/","title":{"rendered":"How to lock Client Security or Server Security firewall profile so that a local user cannot change it?"},"content":{"rendered":"

Issue:<\/h3>\n

How to lock \/ force Client Security or Server Security firewall profile so that a local user cannot change it from the local user interface even if the user has administrator privileges?\u00a0<\/p>\n

Resolution:<\/h3>\n

You can force a user to use a specific firewall profile by following these steps:<\/p>\n

    \n
  1. Log in to the Policy Manager Console<\/li>\n
  2. Select a host or policy domain from the Domain tree<\/li>\n
  3. Go to the\u00a0Settings\u00a0<\/b>tab<\/li>\n
  4. Go to the\u00a0Firewall\u00a0<\/b>settings page<\/li>\n
  5. In the General<\/b> section, click on the\u00a0Lock\u00a0<\/b>on the right side of\u00a0Workstation host profile\u00a0<\/b>or\u00a0Server host profile<\/b><\/li>\n
  6. Distribute the policy (Ctrl + D)<\/li>\n<\/ol>\n

    Once the policy has been taken into use, the\u00a0firewall profile\u00a0<\/b>selection drop-down menu will be grayed out and a local user cannot change the profile from the one pre-selected by the admin.\u00a0<\/p>\n

    If you only want to hide specific firewall profiles from the local user interface, you can add them to the\u00a0Hidden firewall profiles\u00a0<\/b>list:<\/p>\n

      \n
    1. Log in to the Policy Manager Console<\/li>\n
    2. Select a host or policy domain from the Domain tree<\/li>\n
    3. Go to the\u00a0Settings\u00a0<\/b>tab<\/li>\n
    4. Go to the\u00a0Firewall\u00a0<\/b>settings page<\/li>\n
    5. Scroll down to the\u00a0Changing profiles\u00a0<\/b>section and click the\u00a0Hide profiles\u00a0from users\u00a0<\/b>link<\/li>\n
    6. Click\u00a0Add<\/b><\/li>\n
    7. Select the profile you want to hide and click\u00a0OK\u00a0<\/b><\/li>\n
    8. Click\u00a0Close<\/b><\/li>\n
    9. Distribute the policy (Ctrl + D)<\/li>\n<\/ol>\n

      Now the hidden firewall profile isn't visible or shown to the local user.\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"

      How to lock \/ force Client Security or Server Security firewall profile so that a local user cannot change it from the local user interface?\u00a0<\/p>\n","protected":false},"template":"","support_article_product":[106],"class_list":["post-8097","support_article","type-support_article","status-publish","hentry"],"acf":{"source_foreign_id":"000006432","source_version":1,"source_system":"salesforce","source_date_updated":"2026-10-18 19:02:40","import_hash":"2df3601d4cd6f575c7bc7c020cfab6e1bd9cbcc7","vanilla_article_id":"","vanilla_url":"","vanilla_kb_id":"","vanilla_category_id":"","machine_translated":false,"reactions_helpful_yes":"","reactions_helpful_no":""},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/support_article\/8097","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/support_article"}],"about":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/types\/support_article"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/media?parent=8097"}],"wp:term":[{"taxonomy":"support_article_product","embeddable":true,"href":"https:\/\/support.withsecure.com\/de\/wp-json\/wp\/v2\/support_article_product?post=8097"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}