Endpoint Protection

Hi everyone,

My company manages the firewall for another company who use Symantec Endpoint Protection. Now we are wanting to give their machine access to update Endpoint Protection, but no other outbound internet access.

Is there an IP range that all updates will always sit in that i can use for the firewall rule?

You can use the autoupgrade feature; the port used for communciation with the manager is enough as the client talk to the manager and get the updates

http://www.symantec.com/business/support/index?page=content&id=HOWTO17911

Use the Firewall rule to configure to allow /block the traffic.

Hello,

Create these firewall rules to allow SEP to connect to internet to download updates

http://www.symantec.com/business/support/index?page=content&id=TECH102416

Create firewall rules which permit only the SEP services in my previous post to connect to the internet.