Which ports are used for communication in Symantec Quarantine Server 2.0?

Article:TECH99086  |  Created: 2000-01-20  |  Updated: 2007-01-09  |  Article URL http://www.symantec.com/docs/TECH99086
Article Type
Technical Solution


Environment

Issue



You want to know which TCP ports are used by the Symantec Quarantine Server version 2.0 to communicate with the Symantec Security Response (formerly known as SARC) auto-response server to submit quarantined files. You want to know whether opening these ports at the firewall will expose your network to security risks.


Solution



By default, Symantec Quarantine Server 2.0 communicates with the Symantec Security Response auto-response server using the static ports 2847 and 2848 and only require Outbound traffic be enabled. These ports are used by the Quarantine Server to submit viruses using the Scan and Deliver option. These ports are closed after the submission is completed. Symantec Quarantine Server also connects to the Internet using port 80 to obtain virus definition updates. Opening these ports at the firewall to allow outbound traffic from the Symantec Quarantine Server should not pose a security threat.





Legacy ID



2000122012575248


Article URL http://www.symantec.com/docs/TECH99086


Terms of use for this information are found in Legal Notices