Symantec Endpoint Protection Small Business Edition (SEP SBE) agents fail to connect, activate, or update definitions.
To prevent these issues, you need to know which URLs that SEP SBE requires access to.
A proxy or content filtering appliance in your network environment is likely blocking connection the Symantec.cloud servers, or a content filtering appliance is corrupting the content.
To maintain proper functionality, SEP SBE agents require access to the following URLs over ports 80 and 443. A CSV with these URLs can be found below:
Note: If an application firewall is in use, the whitelist should extend to the IPS section, and you need to disable "Deep Packet Inspection"
|liveupdate.symantecliveupdate.com||Virus definition updates|
|stats.qalabs.symantec.com||Fault data collection analysis server|
|csasmain.symantec.com||Primary activation URL|
|csasalt.symantec.com||Secondary activation URL|
|cloudconnect2.norton.com||CloudConnect activation URL|
|Keepalive messages are submitted to and from this URL for online or offline status.|
|PA, AV, and BA messages are transmitted to and from this URL for in-depth status (viruses, backup messages, etc).|
|ins.spn.com||Installation URL for installing PA, AV, and BA. The extractor uses this URL.|
|https://manage.symanteccloud.com||Partner management console|
Alternatively, whitelisting the following domains will help ensure proper client communications:
To learn how to test and confirm connectivity to installation and activation URLs, see Errors or failures when installing or activating agents.
Imported Document Id
CSV with URLs
SBE_Cloud_URLs.csv (474.0 B)