How to block incoming port 3389 in Symantec firewall

Hello All,

i am planing to block incoming port 3389 on all our systems through SEPM firewall except from three servers (Jump box).

please help me out how do i configur the above rule on SEPM firewall.

The requirement is to have

RDP disable from :

• Workstations (Desktops and Laptops) to Workstations.

RDP will be only allowed from

• Workstations to Jump box
• Jump box to Workstations