If you are using LUA for download definition file no need to internet connection

Hi Symantec support,

If SEPM does not have internet connection, any problem with definition report or any problem with management issue?

HI,

No Issue occured your sepm server are received updated for your LUA server and any other management report are working with your sepm database.

But it always show me below screen on SEPM server, does any matter?

HI,

Is your sepm server are updated for LUA ?

If all the clients are being configured to receive updates from LUA directly, you can ignore this message..

Whats the definition status of the SEPM ? has it been downloaded the latest one?

"Thumbs Up" to AravindKM's post above.

Assuming your SEP clients are configured to download their updates directly from the LUA (and that the LUA only downloads the client definitions), then there is no reason for the SEPM itself to have the latest definitions, other than for reporting.

Just so you know, the SEPM itself does try to access the Internet for other information other than definitions.  These include, Symantec Licensing servers, Security Response ThreatCon levels, an "idea" of what the latest definitions released by Symantec are (not the actual defs themselves), etc.  Not to mention the SEP Clients (on 12.1) also try to contact the Symantec Insight servers directly on the Internet for reputation information as well.

Hi Symantec support

Then what ports should I set on firewall rule to allow internet access for SEPM? are 80,21 and?

port 80 will work. unless you want to use ftp.