Hi,
Basically CcSvchst.exe is a critical service for SEP. In the back end it manages many component like Submission engine (SubEng.dll)
This article talks how it works: http://www.symantec.com/docs/TECH162901
There are multiple ccSvcHst.exe instances running on your computer. The SepMasterService service requires one instance, and an additional instance is required for each user session.
You might be interested to know communication ports, listening process & their description.
http://www.symantec.com/docs/TECH163787