Endpoint security | Firewall Configuration through Microsoft Endpoint Configuration Manager

Abhishek_Pandey You can do both. It works together, as "merged". When you apply a custom rule by intune it will add to the current rules already applied to the machine that it was "learned" before.

Also, you can disable "local rules". So all the rules that the machine have "learned" before will be dismissed, and will only have the custom rules applied remotely by Intune.

I don't know if I was clear.