You want to know which ports are used by the Symantec Mail Security for Microsoft Exchange (SMSMSE) product.
Symantec Mail Security for Microsoft Exchange (SMSMSE) scans SMTP mail traffic that passes through Exchange servers on port 25. SMSMSE does not interact with MAPI or with other mail protocols like POP3 on port 110 or IMAP on port 143.
Some of SMSMSE's components require certain ports for communications. By default, SMSMSE uses:
Rapid Release Definitions
Frequent AV updates
Continuous Premium AntiSpam updates
Process ID: 0 or 4 (System)
If the optional Rapid Release feature is not used, SMSMSE will not initiate activity on port 21.
If Symantec Premium AntiSpam is not licensed and enabled, SMSMSE will not initiate activity on port 443.
If Symantec Premium AntiSpam is enabled, be sure to open port 443 on the firewall for bi-directional traffic to aztec.brightmail.com
The port used for communications with SMSMSE's Console can be configured during installation or at any time after. Please note that activity will only be seen on these ports when using the console to administer a remote server.
Symantec Mail Security for Microsoft Exchange also has the ability to leverage Symantec LiveUpdate to retrieve virus definitions. Please see the following KB article to determine the list of ports utilized by Symantec LiveUpdate.
There are no port conflicts or incompatibility between SMSMSE and Symantec Endpoint Protection or the Symantec Endpoint Protection Manager. These products have been engineered to work together on the same server with little customization from the administrator. See the "About using Mail Security with other antivirus products" section of the Symantec™ Mail Security for Microsoft® Exchange Implementation Guide for important information about the use of LiveUpdate and the setting of exclusions.