DeviceLock Security Policies (Offline Profile) : Managing Offline Security Policies for Protocols : Managing Offline IP Firewall
  
Managing Offline IP Firewall
For details on the Basic IP Firewall feature, see Managing Basic IP Firewall.
The offline IP Firewall can have one of the following states:
Not Configured - The IP Firewall is not configured. The following message is displayed: “Offline Basic IP Firewall is not configured.” This is the default state.
Configured - The IP Firewall is configured.
Use Regular - The inheritance of the offline IP Firewall is blocked and the regular IP Firewall is enforced. The following message is displayed: “Offline Basic IP Firewall is configured to use Regular Basic IP Firewall.” Offline DeviceLock Service settings can have this state only in DeviceLock Service Settings Editor or DeviceLock Group Policy Manager.
The enforcement of the regular IP Firewall is helpful when using Group Policy or DeviceLock Service settings files (.dls) to deploy DeviceLock policies throughout the network as this kind of enforcement can be used to prevent the offline IP Firewall inherited from a higher level from being applied to a specific group of client computers at a lower level.
For more information on the enforcement of the regular IP Firewall, see Removing offline firewall rules.
Managing offline firewall rules involves the following tasks:
Defining offline firewall rules
Editing offline firewall rules
Copying offline firewall rules
Exporting and importing offline firewall rules
Deleting offline firewall rules
Undefining offline firewall rules
Removing offline firewall rules