SEP Firewall : Unmatched IP Traffic settings

I am working on SEP 12.1.5 and not able to find the place to change the firewall settings for the "Unmatched IP Traffic Settings". The options are "Allow IP traffic" and "Allow only Application Traffic" with the option to select "Prompt before allowing Application Traffic". I was wondering if this was an implied setting based on the firewall rules but after reading some of the posts it seems like an actual setting. Is it perhaps the version of SEP I am using? The attachment shows the status on the client, but can't find the corresponding settings on the server side. Any help will be truely appreciated.