Endpoint Protection

Hi All,

What is the different between Policy Manager and SEPM?

Are the ports being used different from each other?

If no different then does i only need to open firewall for ports 8014 and 2967?

regards

What is the different between Policy Manager and SEPM?

Symantec Endpoint Protection Manager and Policy manager refers the same. Because this is the console where the policy will be created/edited/deleted.

Are the ports being used different from each other?

SEPM host a website, that port needs to be open as client communicates on the hosted webport of SEPM.

If no different then does i only need to open firewall for ports 8014 and 2967? 

default it is 8014. 2967 port is for the GUP machines i.e. client communicates to GUP on port 2967.

forgot to mention, if Sygate is being used it is also called Symantec Policy manager, is it the case with you? Are you using Sygate by any chance?

http://www.symantec.com/business/support/index?page=content&id=TECH102462&locale=en_US

pasted the URL for communication port

http://www.symantec.com/business/support/index?page=content&id=TECH102416&locale=en_US

Are you referring to Sygate Policy Manager ? If yes thenPolicy Manager  is a  legacy Symantec Sygate server software.

SEPM is the managment console used for configuration and mangemnet in Symantec 11.0

The policy manager uses the same port used by SEPM

Which communication ports does the Symantec Policy Manager 5.x use?

http://www.symantec.com/business/support/index?page=content&id=TECH103615&locale=en_US

Port Number	Port Type	Initiated by	Listening Process	Description
80	TCP	Agents	svchost.exe (IIS)	Communication between the Policy Manager and Agents and Enforcers.
443	TCP	Agents	svchost.exe (IIS)	Optional secured HTTPS communication between a Policy Manager and Agents and Enforcers.
1433	TCP	Policy Manager	sqlservr.exe	Communication between a Policy Manager and a Microsoft SQL Database Server if they reside on separate computers.
1812	UDP	Enforcer	w3wp.exe	RADIUS communication between a Policy Manager and Enforcers for authenticating unique ID information with the Enforcer.
2638	TCP	Policy Manager	dbsrv9.exe	Communication between the Embedded Database and the Policy Manager.
8443	TCP	Remote Java or web console	SemSvc.exe	HTTPS communication between a remote Policy Management Console and the Policy Manager. All login information and administrative communication takes place using this secure port.
9090	TCP	Remote web console	SemSvc.exe	Initial HTTP communication between a remote Policy Management Console and the Policy Manager (to display the login screen only).
8005	TCP	Policy Manager	SemSvc.exe	The Policy Manager listens on the Tomcat default port
39999	UDP	Enforcer		Communication between the Agents and the Enforcer. This is used to authenticate Agents by the Enforcer.

Hi All,

Thanks for the fast replies!

Yes i am going to use Sygate Policy Manager combined with SEP Agents for Win XPe 5.1

I asked this question just to make sure if there's any different with SEPM and to avoid confusion. I am also curios if there's any specific community support on this product, i hardly found any reference when i Google'd it...

So legacy means that Policy Manager is the earlier version of SEPM right?

Erm for the ports, i do not find any reference to port 8014 tough. The manual only mentioning port 80.

Ok, another question. Can i configure Policy Manager as GUP?

sygate if the firewall and Application device control component which has been included under the SEPM (SEP 11.x).

you can get more information on this link

http://www.symantec.com/business/support/index?page=landing&key=52746

So legacy means that Policy Manager is the earlier version of SEPM right?

Yes, however these two products are different, as SEP (11.x) version has other components (AV/AS, PTP).

Ok, another question. Can i configure Policy Manager as GUP?

GUP feature is introduced in SEP (11.x) version, as you might be aware the GUP provides the content updates to the desired clients.

Hi again,

May i know what's the port used if the Policy Manager use local SQL database?

I know that it would use port 1433 if SQL is installed at different PC..

Thanks!

SQL will use port 1433 irrespective of the location(local/remote) of it.