When you install SEP programs are automatically added to the firewall for exception
However these are the programs
SMC Service
C\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe
SNAC Service
C\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE
Symantec Email
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
And the ports you need to exclude are
Port TCP 8014 if your SEPM is 11.0.3001xxx or above.
If its Below 11.0.3001.xxxx then its TCP 80