Endpoint Protection

Hi People,

Can anyone here please confirm and clarify what ports that I need to open for the Linux SAVFL client ?

This page: http://www.symantec.com/business/support/index?page=content&id=HOWTO81451 only said that TCP ephemeral ports on clients is required ?

its 8014

ReportServerURL - Set the reporting server URL. The format is http://serverip:port/Reporting. The reporting server uses port 8014 by default. You must set the reporting server IP address and port number to enable the service to upload log records and inventory information.

Thanks Rafeeq, in this case I'm talking about SAVFL which must be updated using Symantec LUA server not the SEP client talking to SEPM server.

Where is port 7070 ? I cannot see it needed on the list ?

You are right in that case it will be 7070.

You would edit the liveupdate.conf  file something like this

hosts/0/url=http://YOUR_SERVER_IP_HERE:7070/clu-prod
workdir=/tmp

http://www.symantec.com/business/support/index?page=content&id=TECH93505

So is that 7070 or 8014 ? I got confused here  

To get update from Luadmin it needs to have 7070 open

to send logs to SEPM ( using savfl reporter) it needs to have 8014 open... :)

Hi John,

Allow connections out to 7070 (or whatvere port your LUA server is using for its Distribution Center.)

If this SAVFL clients sends any data to the SEPM for inclusion in the SEPM's logs and alerts ("SAVFL Reporter") then also open 8014.

Hope this helps!

Mick