How to block a user's ability to disable Symantec Endpoint Protection on Clients

So I figured this should be a popular request and sure enogh I found the tech note:

https://support.symantec.com/en_US/article.TECH102...

However there's no such thing as "Allow users to enable and disable Network Threat Protection"to uncheck?

I do see "Allow the following users to enable or disable the firewall"but I do NOT see the first setting which the tech note calls for?

Thank you!

~B