Symantec Endpoint Protection Small Business Edition12.1

I have a new installation.  I am running Symantec Endpoint Protection Small Business Edition12.1 on Windows Server 2008.  The clients may include Windows Server 2008, Windows 7 and Windows XP.  The XP clients run in a Workgroup.

The client machines and policies appear to work fine with one exception.

I want the clients to be able to either view only or view and edit the firewall rules applied by the policy.

Based on Web searches I get the impression I should be able to do this.  I can't find the settings that would allow this.

Thank you.