Endpoint Protection

I am running SEPM 12.1.6 MP5 on Windows Server 2012 R2 Datacenter with an external database. 

The server is in an extremely controlled environment and security is wanting us to justify Port 80.  We do not use LiveUpdate but import virus definitions from the previous day from our user network Symantec Server (by downloading the .jdb file) to this server as a requirement. Please don't get lost in the WHY we do that ... I just need to know if we can safely disable port 80 if we are not using Live Update?  I previously understood Port 80 was required for the User Interface Web GUI and/or communications between the SEPM and the client.  I have looked at several links and could not really verify my understanding of this port.  I appreciate any guidance you can lend.  Thanks!

Port 80 isn't used if you are updating from the SEPM or via JDB file. If you are importing the JDB file from another machine you won't need the port. if you download them directly to this machine you will only need to restict access to the websites that you download the JDB's from. 

Ports Required for SEP
https://support.symantec.com/en_US/article.HOWTO81103.html

I realize Port 80 is not used for importing the .JDB.  I just wanted to make sure it would not prevent use of the web interface or some other feature that might be using Port 80.  

Also, I should add 443 is not enabled either ... one is HTTPS and the other is HTTP but I think I am still ok here.

8014 is what's used if http, otherwise 443 will be used.