Video Screencast Help

Ports and destinations quesiton for SEPM

Created: 22 Aug 2013 | 5 comments

Hello,

I have a SEPM setup in a zone that's extremely locked down behind firewalls.  Obviously we need to open up some ports so that the SEPM can update and send those updates to all clients.

We have 8014 opened up between SEPM and clients - that's not a problem.

The SEPM however is not updating with new content.  I see that we need to open ports TCP 80, 443, and 21 for LiveUpdate.  The problem with that is, opening those ports are waaay too broad for us.  We need specific destinations (IP address, DNS entries) each of these ports communicate to. 

Can someone give that information or point me in the right direction, please?

Thanks so much!

Operating Systems:

Comments 5 CommentsJump to latest comment

_Brian's picture

See this article on what to allow:

How to determine whether your firewall is blocking LiveUpdate

http://www.symantec.com/docs/TECH139451

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Chetan Savade's picture

Hi,

Thank you for posting in Symante community.

I would be glad to answer your query.

It's not possible to provide specific info about IP address or DNS entry. However you can add the host entry for Symantec.liveupdate.com or liveupdate.symantecliveupdate.com in the firewall to pass.

Check these articles, it will tell the info about ports used by SEP.

Which Communications Ports does Symantec Endpoint Protection use?

http://www.symantec.com/docs/TECH163787

Ports and Protocols to be allowed when using a proxy in a SEP environment.

 http://www.symantec.com/docs/TECH131843 

Processes and Services used by Symantec Endpoint Protection

http://www.symantec.com/docs/TECH102748

 

Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

Seyad's picture

 

Can LiveUpdate be configured to use static IP addresses?
 
Hope that helps...
Chetan Savade's picture

Thanks for shring this article yes.

Chetan Savade
Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<