Introduction

Notification Server

Connection Profiles and Pluggable Protocols Architecture

Event Console

Software Management Framework

Task Server

Network Discovery

Monitor Solution

Symantec Workflow

Symantec Installation Manager

Introduction

This document provides consolidated information regarding the ports and protocols used by Symantec Management Platform (SMP) version 7.x.

Notification Server

Notification Server ports

Package multicast port

TCP/IP port 52030 by default, but can be configured to use a different port.

Altiris Agent Installation

Notification Server uses standard MS ports to connect to the workstation from the Notification Server to copy over the bootstrap and then HTTP from the workstation to the Notification Server to download the agent.

Initial connection Notification Server to client

• UDP 138 (NETLOGON)
• TCP 445 (MS DS/CIFS/SMB)

Initial connection Client to Notification Server (after Service Starts)

• TCP 80 (HTTP) client download
• ICMP Type 8 (PING) package server speed check

Ports used by Win32 Altiris Agent after installation

HTTP Client / Server communications, such as policy updates and posting events:

The Agent establishes a connection to server port TCP 80 for HTTP and server port TCP 443 for SSL. This port is configurable by the user, however, and can be set to any free port.

Downloading packages from the Notification Server or Package Servers:

Clients can download via HTTP (see above for port assignment) or via SMB connection. SMB uses MS standard NETBIOS ports UDB (135, 137, 139), TCP (135, 139). For SMB over TCP (CIFS), port UDP & TCP 445 is required.

Wake on LAN and Power Management:

By default, this is port 52028, or 52029 for multicast. Can be configured to use a different port.

Hierarchy and Replication

Hierarchy uses the ports that individual Notification Servers have been set up and configured to use.

By default, IIS is set to use port 80. However, it can be configured to use any of the supported range port numbers, and Notification Server can use any port that has been set in IIS.

By default, HTTPS uses port 443.

To join Notification Servers in a hierarchy, you must correctly enter the port numbers or HTTPS prefix inside the Add Hierarchy Node Wizard. In Step 1 of the wizard, in the URL field, you enter either HTTPS or the IIS port.

For example, to add a child node called HN-NSX8605.testdom01.lab using port 30000, enter http://HN-NSX8605.testdom01.lab:30000/Altiris/Console in the URL field. This means that your child Notification is configured to use port 30000, and you are instructing the local Notification Server to connect to it for hierarchy communications using that port.

To add a child node called HN-NSX8605.testdom01.lab using HTTPS, enter https://HN-NSX8605.testdom01.lab/Altiris/Console in the URL field.

Notification Servers within the hierarchy may not all use the same HTTP port for communication. As long as the hierarchy connection is configured correctly inside the Add Hierarchy Node Wizard, they will all work correctly.

Accessing the Altiris Console using a Remote Computer

When using a remote console, Notification Server uses HTTP (port 80) to connect to the server and download the client application / admin console content.

Agent for UNIX, Linux, and Mac

Notification Server uses SSH to connect to the client computer to copy over the bootstrap and then HTTP or HTTPS from the client computer to the Notification Server to download the agent.

Initial connection Notification Server to UNIX, Linux or Mac client

• TCP 22 (SSH, configurable)

Initial connection Client to Notification Server (after Service Starts)

• TCP 80 (HTTP), 443 (HTTPS) or other custom port depending on Notification Server configuration for Agent download

Connection Client to Package Server

• ICMP Type 8 (PING) package server speed check
• TCP 80 (HTTP), 443 (HTTPS) or other custom port depending on Package Server configuration for package download

Further communication with Notification Server uses configurable ports specified in the policies (defaults are standard HTTP, HTTPS, or FTP ports).

The 7.0 Unix Agent uses the same multicast and TCP settings as the Win32 Altiris Agent which can be configured from the Symantec Management Console. The defaults are:

• TCP/IP Port 52028
• Multicast Address: 224.0.255.135
• Multicast Port: 52029

Ports used by Altiris Agent for UNIX, Linux, and Mac

Connection Profiles and Pluggable Protocols Architecture

Connection Profiles and Pluggable Protocols Architecture use the following ports and protocols.

Event Console

Event Console uses the following ports and protocols.

Software Management Framework

Software Management Framework works through the Altiris Agent. There is no difference from that of the Win32 Altiris Agent ports.

Task Server

Network Discovery

Network Discovery uses the ports as configured through the Connection Profiles and Pluggable Protocols Architecture

Monitor Solution

Monitor Solution listens on port 1011 by default. This is configurable and can be changed by the user in the Agent Configuration settings.

Monitor Solution also monitors specified ports associated with common applications. This is configured using agentless or agent-based Port metrics.

Symantec Workflow

Symantec Installation Manager

SIM uses port TCP 80 for HTTP and port TCP 443 for SSL.

SIM uses ports to download files only. It does not open any ports.

SIM accesses the following URLs. Your firewall should allow these URLs in order to use SIM properly.