Symantec Management Agent is listening on port 5000

Article:TECH200669  |  Created: 2012-12-07  |  Updated: 2013-01-30  |  Article URL
Article Type
Technical Solution


Why is the Symantec Management Agent listening on port 5000?  This port is not normally seen in other articles listing commonly-used ports by Altiris solutions.



Symantec Management Platform 7.1 SP2



When the PCAnywhere subagent is installed onto the Symantec Management Agent (SMA), the SMA will begin to listen to port 5000 while the PCAnywhere agent uses its own port to listen on.  This behavior is a result of a little used feature called "Host Call Remote" or "Host Initiated Remote."  This feature was designed to allow connection to pcAnywhere hosts that were behind firewalls as long as the SMA agent was able to communicate with the Notification Server on port 5000.  As this feature is rarely used and was removed as of pcAnywhere Solution 12.6.7 the behavior of forcing the SMA to listen on port 5000 is being considered for removal from the code in a later release.   



If port 5000 is required for another purpose, there are two possible options for stopping the usage of port 5000.  Note that Symantec ALWAYS recommends backing up any filds or folders, especially the Windows Registry, before making ANY modifications.

Option 1:  Remove the pcAnywhere agent using the uninstall policy from the Symantec Management Platform console; however, once uninstalled you will no longer be able to use the remote capabilities on that computer resource.  In some situations, customers may have removed the PCAnywhere agent through the Windows control panel (rather than using the uninstall policy from the console) and have observed that the SMA may still be listening on port 5000.  Check to the registry on the managed computer to see if HKLM\Software\Altiris\Altiris Agent\Plugin Objects\Agents\pcAAgent exists.  If so, modify "Always Load" dword value from 1 to 0 and restart the SMA services.

Option 2:  Disable the Host Invitation feature (therefore keeping the pcAnywhere agent installed while freeing up port 5000 from the SMA) by making the following registry modification:

  1. Click on Start > Run. On the open line, type regedit.
  2. Click OK.
  3. Go to: HKEY_LOCAL_MACHINE\SOFTWARE\Altiris\Altiris Agent\Plugin Objects\Agents\pcAAgent.
  4. Create a new DWORD entry "EnableHostInvitation" with the value of 0
  5. Save Changes.
  6. Restart the SMA services.



Symantec Corporation has acknowledged that the above-mentioned issue is present in the current version(s) of the product(s) mentioned at the end of this article. Symantec is committed to product quality and satisfied customers.
This issue is currently being considered by Symantec to be addressed in the next major revision of the product. There are no plans to address this issue by way of a patch or hotfix in the current or previous versions of the software at the present time. Please note that Symantec reserves the right to remove any fix from the targeted release if it does not pass quality assurance tests or introduces new risks to overall code stability. Symantec’s plans are subject to change and any action taken by you based on the above information or your reliance upon the above information is made at your own risk.
Please be sure to refer back to this document periodically as any changes to the status of the issue will be reflected here.
Please contact your Symantec Sales representative or the Symantec Sales group for upgrade information including upgrade eligibility to the release containing the resolution for this issue. For information on how to contact Symantec Sales, please refer to the following Web site:

Article URL

Terms of use for this information are found in Legal Notices