Manually enabling network file and printer browsing for unmanaged Symantec Endpoint Protection 11.0 clients.

Article:TECH102586  |  Created: 2007-01-05  |  Updated: 2011-07-15  |  Article URL http://www.symantec.com/docs/TECH102586
Article Type
Technical Solution


Environment

Problem



How can network file and printer browsing be enabled for unmanaged Symantec Endpoint Protection 11.0 clients?

Symptoms
Unmanaged Symantec Endpoint Protection 11.0 client cannot access shared network folders.

  • Network threat protection is installed and enabled.

 


Cause



The ports required to browse shared network folders are blocked.


Solution



NOTE: There are predefined firewall rules for Microsoft Windows file sharing that can be enabled on an unmanaged Symantec Endpoint Protection 11.0 client. For instructions on enabling those rules, please see the following document:

"Unmanaged Symantec Endpoint Protection 11.0 clients cannot access shared network folders" at the following URL:

http://www.symantec.com/docs/TECH102490




If the firewall rules need to be created manually, please follow the steps below.
Creating a rule to allow network file and printer browsing

  1. Open the "Symantec Endpoint Protection client interface."
  2. Click Options beside "Network Threat Protection". This will open a menu.
  3. Click Configure Firewall Rules... in the menu. This will open the "Configure Firewall Rules..." page.
  4. Click Add.... This will open the "Add Firewall Rule" page.
  5. On the "General" tab, name the rule. In the "Action" section, click Allow this traffic.
  6. On the "Ports and Protocols" tab, select TCP from the "Protocol" menu.
  7. In the "Remote ports:" box, type 88,135,139,445
  8. Click OK
  9. Click the Add... This will open the "Add Firewall Rule" page.
  10. On the "General" tab, name the rule. In the "Action" section, click Allow this traffic.
  11. On the "Ports and Protocols" tab, select UDP from the "Protocol" menu.
  12. In the "Remote ports:" box, type 88.
  13. In the "Local ports" box, type 137,138
  14. Click OK.
  15. Confirm that both of the new rules are enabled (have a check mark beside them).



If the server sharing the folders is also an unmanaged SEP 11 client, please follow the steps below on that client:
Creating a rule to allow network file and printer sharing

  1. Open the "Symantec Endpoint Protection client interface."
  2. Click the Options beside "Network Threat Protection". This will open a menu.
  3. Click Configure Firewall Rules... in the menu. This will open the "Configure Firewall Rules..." page.
  4. Click Add. This will open the "Add Firewall Rule" page.
  5. On the "General" tab, name the rule. In the "Action" section, click Allow this traffic.
  6. On the "Ports and Protocols" tab, select TCP from the "Protocol" menu.
  7. In the "Local ports:" box, type 88,135,139,445
  8. Click OK.
  9. Click the Add. This will open the "Add Firewall Rule" page.
  10. On the "General" tab, name the rule. In the "Action" section, click Allow this traffic.
  11. On the "Ports and Protocols" tab, select UDP from the "Protocol" menu.
  12. In the "Local ports" box, type 88,137,138
  13. Click OK.
  14. Confirm that both of the new rules are enabled (have a check mark beside them).




References
For more information on ports used by Microsoft Windows, see the following document:


"Service overview and network port requirements for the Windows Server system" at URL: http://support.microsoft.com/kb/832017

This document is available in the following languages:




Legacy ID



2007100512163348


Article URL http://www.symantec.com/docs/TECH102586


Terms of use for this information are found in Legal Notices