Endpoint Protection

When our (Symantec 11) client servers recieve pushed updates from our Symantec update server. We experience temporary port (6666) blockage and this causes our applications on this server
extreme issues. Is this temporary blockage of ports normal and if so are there so white papers that can provide me this information and why it is necessary?

Thank you, Roger Elzinga

Hi Elzinga,

Can you provide some additional information so that the forum community can better understand your issue?

Are the SEP 11 clients receiving updates from a SEPM or from an internal LiveUpdate server?  In either case, they should be receiving that material over normal http ports.  Port 6666 is not used by default in SEP communications.

Which Communication Ports does Symantec Endpoint Protection 11.0 use? (http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2007090614430148)

Is it the SEP firewall component, raising some sort of warning-?  If so, can a log be provided?

Thanks and best regards,

Mick

IRC servers typically run on this port.  Are you running IRC servers on these systems?

Are you running any other security software on these clients? Please provide your product version number as well.

Thank you, for your responses!
     We are running SEP 11.0.5002.333 Antivirus only!! no firewall piece.
Updates are being recieved from an internal Liveupdate server.
The servers are running Avaya Modular Messaging application. No IRC and there is no other security software on these boxes.

Thanks in advance!

Scansoft Realspeak 4.0 TTS service is running on TCP port number 6666
Thanks in advance!