Creating endpoint protection policies