Networking Port Requirements

You can use the following ports information to configure the networking firewalls for Symantec Protection Engine.
Outbound port requirements
Feature
Port
Description
Domain URL
LiveUpdate
80
Download LiveUpdate definitions using HTTP.
http://liveupdate.symantec.com
LiveUpdate
443
Download LiveUpdate definitions using HTTPS.
https://liveupdate.symantec.com
APK Reputation
443 (default)
Server port for File SHA256 hash-based APK Reputation scanning.
https://mobinsight.symantec.com
File Reputation
443 (default)
Default server port for File Reputation scanning.
https://ent-shasta-rrs.symantec.com
Telemetry
443
This port is used to send install and run-time telemetry to Symantec.
https://entced.symantec.com
Rapid Release
80 (default)
Download AV Rapid Release definitions using HTTP.
http://definitions.symantec.com
Rapid Release
443
Download AV Rapid Release definitions using HTTPS.
https://definitions.symantec.com
Rapid Release
20, 21
Download AV Rapid Release definitions using FTP.
ftp://ftp.symantec.com
SPE Onboarding Tool
443
This port used onboarding portal communication.
https://sep-trial.securitycloud.symantec.com
Centralized Console
443
Symantec Protection Engine connects to Symantec's back-end services of centralized management on this port.
https://scwp.securitycloud.symantec.com
Centralized Console
443
Symantec Protection Engine connects to Symantec's back-end services of centralized management on this address to publish events.
https://usea1.r3.securitycloud.symantec.com
SPOC Server
443
Symantec Protection Engine connects to Symantec's SPOC (single point of contact) services of centralized management on this port.
https://spoc-pool-gtm.norton.com
https://us.spoc.securitycloud.symantec.com
SMTP
25 (default)
Symantec Protection Engine uses this port to send email alerts.
Based on Symantec Protection Engine configuration, use the appropriate details to configure the firewall settings.
SNMP
162 (default)
Symantec Protection Engine uses this port to send SNMP traps.
Based on Symantec Protection Engine configuration, use the appropriate details to configure the firewall settings.
Inbound port requirements
Feature
Default Port
Configurable
Description
SPE Standalone Console
8004
Yes
1025 to 65535
The Secure Socket port that is used to download on-prem applet-based console.
SPE Standalone Console
8005
Yes
1025 to 65535
The Secure Socket port is used to configure Symantec Protection Engine policies and to generate reports from on-prem applet-based console.
ICAP
1344
Yes
1025 to 65535
This port lets ICAP clients connect and submit scan requests.
Secure ICAP
11344
Yes
1025 to 65535
This port lets Secure ICAP clients connect and submit scan requests.