Unable to edit firewall profile in Policy Manager Console due to it being grayed out

Issue:

Administrator is unable to edit or modify firewall settings profiles in the Policy Manager Console because the Add rule, edit rule and remove rule buttons are greyed out.

Resolution:

The reason why the buttons are greyed out and cannot be clicked on the Policy Manager Console's Firewall settings page is because the firewall profile that you have selected from the Profile being edited drop-down menu is a predefined profile created by WithSecure or it has been created by an admin who is out of your scope. 

Firewall profiles have three possible scopes in the Policy Manager Console:

• Predefined: not editable, defined by WithSecure or upper-level admins, available for all the policy domains and hosts within the admin's scope
• My scope: editable, defined by the admins who share the same domain access level, available for all the policy domains and hosts within the admin's scope
• Sub-admin scope: editable, defined by the sub-admins and available only within their scopes

To create a profile to your own scope (my scope):

1. Log in to the Policy Manager Console
2. Select a host or policy domain from the domain tree
3. Open the Settings tab
4. Go to the Windows > Firewall settings page
5. Select a profile from the Profile being edited drop-down menu 
6. Click Clone 
7. Enter a name for the profile

Now you have a custom profile which you can edit. You can then assign that profile to the selected host or policy domain by selecting if from the Workstation host profile or Server host profile drop-down menu.