資訊安全技術論壇

 找回密碼
 加入會員
搜索
查看: 2705|回復: 0

[HOW-TO] Symantec Endpoint Protection 通訊埠列表

[複製鏈接]
發表於 2015-9-7 14:31:33 | 顯示全部樓層 |閱讀模式
本帖最後由 DannyLan 於 2015-9-7 17:49 編輯

Port NumberPort TypeInitiated ByListening ProcessDescription
8014 / 80TCPSEP clientshttpd.exe (Apache)
svchost.exe (IIS)
Communication between the SEPM and SEP clients and Enforcers.
(8014 in MR3 and later builds, 80 in older).
SEP 12.x uses Apache. SEP 11.x uses IIS.
443TCPSEP clientssvchost.exe (IIS)
httpd.exe (Apache)
Optional secured HTTPS communication between a SEPM and SEP clients and Enforcers.
1100TCPAjaxSwinghttpd.exe (Apache)Tells AjaxSwing on which port to run RMI Registry. (SEP 12.1.x)
1433TCPSEPMsqlserver.exeCommunication between a SEPM and a Microsoft SQL Database Server if they reside on separate computers.
1812UDPEnforcer12.x: httpd.exe (Apache)
11.x: w3wp.exe
RADIUS communication between a SEPM and Enforcers for authenticating unique ID information with the Enforcer.
2638TCPSEPM12.1.x: dbsrv11.exe
11.x: dbsrv9.exe
Communication between the embedded database and the SEPM.
2967TCPSEP clientsSmc.exeThe Group Update Provider (GUP) proxy functionality of SEP client listens on this port.
8765 / 8005TCPSEPMSemSvc.exeThis is the Tomcat Shutdown port.
In SEP 12.x, port 8765 is used.
In SEP 11.x, the SEPM listens on the Tomcat default port of 8005, except for RU7, which uses 8765.
8045TCPSEPMSemSvc.exeIn SEP 11 RU6, SEPM, the registry is started by the Tomcat servlet container. CreamTec's AjaxSwing uses the existing registry to communicate with its client agents that run in stand alone mode
8443TCPRemote Java or
Web Console
SemSvc.exeHTTPS communication between a remote management console and the SEPM. All login information and administrative communication takes place using this secure port.
8444TCPSymantec Protection Center (SPC) 2.xSemSvc.exeThis is the SEPM web services port. SPC 2.x makes Data Feed and Workflow requests to SEPM over this port.
8445TCPReporting Consolehttpd.exe (Apache)Added in SEP 12.1.x. HTTPS reporting console.
8447TCPProcess Launchersemlaunchsrv.exeAdded in SEP 12.1.5. Only at localhost's request, this service virtual account launches processes that require higher privileges so that other SEPM services do not require them.
9090TCPRemote Web ConsoleSemSvc.exeInitial HTTP communication between a remote management console and the SEPM (to display the login screen only).
39999UDPEnforcerSNAC.exe (Windows SNAC)
CClientCtl.exe (Windows ODC)
SNAC (Mac SNAC/ODC)
Communication between the SEP clients and the Enforcer. This port is used for authentication of clients by the Enforcer.
適用於 Symantec Endpoint Protection Manager (SEPM) version 11.0, 12.0 以及 12.1
您需要登錄後才可以回帖 登錄 | 加入會員

本版積分規則

Archiver|手機版|小黑屋|資訊安全技術論壇  

GMT+8, 2021-4-19 10:26 , Processed in 30.155204 second(s), 27 queries .

Powered by Discuz! X3.3

© 2001-2017 Comsenz Inc.

快速回復 返回頂部 返回列表