{"id":1114,"date":"2011-07-10T20:27:39","date_gmt":"2011-07-10T18:27:39","guid":{"rendered":"http:\/\/www.schertel.net\/wordpress\/?p=1114"},"modified":"2011-07-10T20:27:39","modified_gmt":"2011-07-10T18:27:39","slug":"ports-needed-by-epo-4-x-for-communication-through-a-firewall","status":"publish","type":"post","link":"http:\/\/www.schertel.net\/wordpress\/?p=1114","title":{"rendered":"Ports needed by ePO 4.x for communication through a firewall"},"content":{"rendered":"
\n

<\/font>Environment <\/font><\/h3>\n
McAfee ePolicy Orchestrator 4.x
McAfee Agent 4.x<\/p>\n

For details of all supported operating systems, see <\/font>KB51109<\/font><\/a>.<\/font><\/div>\n<\/div>\n

\n

<\/font>Summary <\/font><\/h3>\n
The following tables display the ports needed by ePolicy Orchestrator (ePO) 4.x for communication through a firewall:<\/p>\n

<\/font>McAfee ePolicy Orchestrator 4.0<\/p>\n

<\/font><\/strong> <\/p>\n\n\n\n\n\n\n\n\n\n\n
Port<\/font><\/strong><\/td>\nDefault<\/font><\/strong><\/td>\nDescription<\/font><\/strong><\/td>\nTraffic direction<\/font><\/strong><\/td>\n<\/tr>\n
Agent to server communication port<\/font><\/td>\n80<\/font><\/td>\nTCP port opened by the ePO Server service to receive requests from agents.<\/font><\/td>\nInbound\/Outbound connection to\/from the ePO server.<\/font><\/td>\n<\/tr>\n
Agent wake-up communication port
SuperAgent repository port<\/font><\/td>\n		8081<\/font><\/td>\nTCP port opened by agents to receive agent wakeup requests from the ePO server.
TCP port opened to replicate repository content to a SuperAgent repository.<\/font><\/td>\n		Outbound connection from the ePO server.<\/font><\/td>\n<\/tr>\n
Agent broadcast communication port<\/font><\/td>\n8082<\/font><\/td>\nUDP port opened by SuperAgents to forward messages from the ePO server.<\/font><\/td>\nOutbound connection from the SuperAgents.<\/font><\/td>\n<\/tr>\n
Console-to-application server communication port<\/font><\/td>\n8443<\/font><\/td>\nHTTPS port opened by the ePO Application Server service to allow web browser UI access.<\/font><\/td>\nInbound connection to the ePO server.<\/font><\/td>\n<\/tr>\n
Sensor-to-server communication port<\/font><\/td>\n8444<\/font><\/td>\nHTTPS port opened by the ePO Application Server service to receive RSD and Event Parser connections. Also, used by the Agent Handler to talk to the ePO server to get required information (like LDAP servers).<\/font><\/td>\nInbound connection to the ePO server.<\/font><\/td>\n<\/tr>\n
Security threats communication port<\/font><\/td>\n8801<\/font><\/td>\nHTTP port hosted by McAfee Labs for retrieving security threat feed. Note that this port cannot be changed.<\/font><\/td>\nOutbound connection from the ePO server.<\/font><\/td>\n<\/tr>\n
SQL server TCP port<\/font><\/td>\n1433<\/font><\/td>\nTCP port used to communicate with the SQL server. This port is specified or determined automatically during the setup process. <\/font><\/td>\nOutbound connection from the ePO server.<\/font><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

<\/font>McAfee ePolicy Orchestrator 4.5<\/strong><\/p>\n

<\/font> <\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Port<\/font><\/strong><\/td>\nDefault<\/font><\/strong><\/td>\nDescription<\/font><\/strong><\/td>\nTraffic direction<\/font><\/strong><\/td>\n<\/tr>\n
Agent to server communication port<\/font><\/td>\n80<\/font><\/td>\nTCP port opened by the ePO Server service to receive requests from agents.<\/font><\/td>\nInbound\/Outbound connection to\/from the ePO server\/Agent Handler.<\/font><\/td>\n<\/tr>\n
Agent communicating over SSL (4.5 and later agents only)<\/font><\/td>\n443<\/font><\/td>\nBy default, 4.5 agents should communicate over SSL (443 by default).<\/font><\/td>\nInbound\/Outbound connection to\/from the ePO server\/Agent Handler.<\/font><\/td>\n<\/tr>\n
Agent wake-up communication port
SuperAgent repository port<\/font><\/td>\n		8081<\/font><\/td>\nTCP port opened by agents to receive agent wakeup requests from the ePO server.
TCP port opened to replicate repository content to a SuperAgent repository.<\/font><\/td>\n		Outbound connection from the ePO server\/Agent Handler.<\/font><\/td>\n<\/tr>\n
Agent broadcast communication port<\/font><\/td>\n8082<\/font><\/td>\nUDP port opened by SuperAgents to forward messages from the ePO server\/Agent Handler.<\/font><\/td>\nOutbound connection from the SuperAgents.<\/font><\/td>\n<\/tr>\n
Console-to-application server communication port<\/font><\/td>\n8443<\/font><\/td>\nHTTPS port opened by the ePO Application Server service to allow web browser UI access.<\/font><\/td>\nInbound connection to the ePO server.<\/font><\/td>\n<\/tr>\n
Client-to-server authenticated communication port<\/font><\/td>\n8444<\/font><\/td>\nHTTPS port opened by the ePO Application Server service to receive RSD connections. Also, used by the Agent Handler to talk to the ePO server to get required information (like LDAP servers).<\/font><\/td>\nInbound connection to the ePO server. Outbound connection from remote Agent Handlers.<\/font><\/td>\n<\/tr>\n
Security threats communication port<\/font><\/td>\n8801<\/font><\/td>\nHTTP port hosted by McAfee Labs for retrieving security threat feed. Note that this port cannot be changed.<\/font><\/td>\nOutbound connection from the ePO server.<\/font><\/td>\n<\/tr>\n
SQL server TCP port<\/font><\/td>\n1433<\/font><\/td>\nTCP port used to communicate with the SQL server. This port is specified or determined automatically during the setup process. <\/font><\/td>\nOutbound connection from the ePO server\/Agent Handler.<\/font><\/td>\n<\/tr>\n
SQL server UDP port<\/font><\/td>\n1434<\/font><\/td>\nUDP port used to request the TCP port that the SQL instance hosting the ePO database is using.<\/font><\/td>\nOutbound connection from the ePO server\/Agent Handler.<\/font><\/td>\n<\/tr>\n
Default LDAP server port<\/font><\/td>\n389<\/font><\/td>\nLDAP connection to look up computers, users, groups, and Organizational Units for User Based Policies.<\/font><\/td>\nOutbound connection from the ePO server\/Agent Handler.<\/font><\/td>\n<\/tr>\n
Default SSL LDAP server port<\/font><\/td>\n636<\/font><\/td>\nUser Based Policies use the LDAP connection to look up users, groups, and Organizational Units.<\/font><\/td>\nOutbound connection from the ePO server\/Agent Handler.<\/font><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

McAfee ePolicy Orchestrator 4.6<\/p>\n

<\/font><\/strong> <\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Port<\/font><\/strong><\/td>\nDefault<\/font><\/strong><\/td>\nDescription<\/font><\/strong><\/td>\nTraffic direction<\/font><\/strong><\/td>\n<\/tr>\n
Agent to server communication port<\/font><\/td>\n80<\/font><\/td>\nTCP port opened by the ePO Server service to receive requests from agents.<\/font><\/td>\nInbound\/Outbound connection to\/from the ePO server\/Agent Handler.<\/font><\/td>\n<\/tr>\n
Agent communicating over SSL (4.5 and later agents only)<\/p>\n

Software Manager<\/font><\/td>\n

443<\/font><\/td>\nBy default, 4.5 agents should communicate over SSL (443 by default). This port is also used for the remote Agent Handler to communicate with the ePO Master Repository.<\/font><\/td>\nInbound\/Outbound connection to\/from the ePO server\/Agent Handler.<\/font><\/td>\n<\/tr>\n
Agent wake-up communication port
SuperAgent repository port<\/font><\/td>\n		8081<\/font><\/td>\nTCP port opened by agents to receive agent wakeup requests from the ePO server.
TCP port opened to replicate repository content to a SuperAgent repository.<\/font><\/td>\n		Outbound connection from the ePO server\/Agent Handler.<\/font><\/td>\n<\/tr>\n
Agent broadcast communication port<\/font><\/td>\n8082<\/font><\/td>\nUDP port opened by SuperAgents to forward messages from the ePO server\/Agent Handler.<\/font><\/td>\nOutbound connection from the SuperAgents.<\/font><\/td>\n<\/tr>\n
Console-to-application server communication port<\/font><\/td>\n8443<\/font><\/td>\nHTTPS port opened by the ePO Application Server service to allow web browser UI access.<\/font><\/td>\nInbound connection to the ePO server.<\/font><\/td>\n<\/tr>\n
Client-to-server authenticated communication port<\/font><\/td>\n8444<\/font><\/td>\nHTTPS port opened by the ePO Application Server service to receive RSD connections. Also, used by the Agent Handler to talk to the ePO server to get required information (like LDAP servers).<\/font><\/td>\nInbound connection to the ePO server. Outbound connection from remote Agent Handlers.<\/font><\/td>\n<\/tr>\n
Security threats communication port<\/font><\/td>\n8801<\/font><\/td>\nHTTP port hosted by McAfee Labs for retrieving security threat feed. Note that this port cannot be changed.<\/font><\/td>\nOutbound connection from the ePO server.<\/font><\/td>\n<\/tr>\n
SQL server TCP port<\/font><\/td>\n1433<\/font><\/td>\nTCP port used to communicate with the SQL server. This port is specified or determined automatically during the setup process. <\/font><\/td>\nOutbound connection from the ePO server\/Agent Handler.<\/font><\/td>\n<\/tr>\n
SQL server UDP port<\/font><\/td>\n1434<\/font><\/td>\nUDP port used to request the TCP port that the SQL instance hosting the ePO database is using.<\/font><\/td>\nOutbound connection from the ePO server\/Agent Handler.<\/font><\/td>\n<\/tr>\n
Default LDAP server port<\/font><\/td>\n389<\/font><\/td>\nLDAP connection to look up computers, users, groups, and Organizational Units for User Based Policies.<\/font><\/td>\nOutbound connection from the ePO server\/Agent Handler.<\/font><\/td>\n<\/tr>\n
Default SSL LDAP server port<\/font><\/td>\n636<\/font><\/td>\nUser Based Policies use the LDAP connection to look up users, groups, and Organizational Units.<\/font><\/td>\nOutbound connection from the ePO server\/Agent Handler.<\/font><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n


McAfee ePolicy Orchestrator 4.x (Ports\/Traffic Quick Reference)<\/p>\n

<\/font><\/font>Agent Handler:
<\/u>
<\/font><\/strong> <\/p>\n\n\n\n\n\n\n\n\n\n\n\n
Default Port<\/font><\/strong><\/td>\nProtocol<\/font><\/b><\/td>\nTraffic direction<\/font><\/strong><\/td>\n<\/tr>\n
80<\/font><\/td>\nTCP<\/font><\/td>\nInbound\/Outbound connection to\/from the Agent Handler.<\/font><\/td>\n<\/tr>\n
389<\/font><\/td>\nTCP<\/font><\/td>\nOutbound connection from the Agent Handler.<\/font><\/td>\n<\/tr>\n
443<\/font><\/td>\nTCP<\/font><\/td>\nInbound\/Outbound connection to\/from the Agent Handler.<\/font><\/td>\n<\/tr>\n
636<\/font><\/td>\nTCP<\/font><\/td>\nOutbound connection from the Agent Handler.<\/font><\/td>\n<\/tr>\n
1433<\/font><\/td>\nTCP<\/font><\/td>\nOutbound connection from the Agent Handler.<\/font><\/td>\n<\/tr>\n
1434<\/font><\/td>\nUDP<\/font><\/td>\nOutbound connection from the Agent Handler.<\/font><\/td>\n<\/tr>\n
8081<\/font><\/td>\nTCP<\/font><\/td>\nOutbound connection from the Agent Handler.<\/font><\/td>\n<\/tr>\n
8444<\/font><\/td>\nTCP<\/font><\/td>\nOutbound connection from the Agent Handler.<\/font><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

ePO Server:<\/font><\/strong><\/u><\/p>\n

<\/strong> <\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Default Port<\/font><\/strong><\/td>\nProtocol<\/font><\/b><\/td>\nTraffic direction<\/font><\/strong><\/td>\n<\/tr>\n
80<\/font><\/td>\nTCP<\/font><\/td>\nInbound\/Outbound connection to\/from the ePO server.<\/font><\/td>\n<\/tr>\n
389<\/font><\/td>\nTCP<\/font><\/td>\nOutbound connection from the ePO server.<\/font><\/td>\n<\/tr>\n
443<\/font><\/td>\nTCP<\/font><\/td>\nInbound\/Outbound connection to\/from the ePO server.<\/font><\/td>\n<\/tr>\n
636<\/font><\/td>\nTCP<\/font><\/td>\nOutbound connection from the ePO server.<\/font><\/td>\n<\/tr>\n
1433<\/font><\/td>\nTCP<\/font><\/td>\nOutbound connection from the ePO server.<\/font><\/td>\n<\/tr>\n
1434<\/font><\/td>\nUDP<\/font><\/td>\nOutbound connection from the ePO server.<\/font><\/td>\n<\/tr>\n
8081<\/font><\/td>\nTCP<\/font><\/td>\nOutbound connection from the ePO server.<\/font><\/td>\n<\/tr>\n
8443<\/font><\/td>\nTCP<\/font><\/td>\nInbound connection to the ePO server.<\/font><\/td>\n<\/tr>\n
8444<\/font><\/td>\nTCP<\/font><\/td>\nInbound connection to the ePO server.<\/font><\/td>\n<\/tr>\n
8801<\/font><\/td>\nTCP<\/font><\/td>\nOutbound connection from the ePO server.<\/font><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

McAfee Agent:<\/font><\/strong><\/u><\/p>\n

<\/strong> <\/p>\n\n\n\n\n\n\n\n
Default Port<\/font><\/strong><\/td>\nProtocol<\/font><\/b><\/td>\nTraffic direction<\/font><\/strong><\/td>\n<\/tr>\n
80<\/font><\/td>\nTCP<\/font><\/td>\nInbound\/Outbound connection from\/to the ePO server\/Agent Handler.<\/font><\/td>\n<\/tr>\n
443<\/font><\/td>\nTCP<\/font><\/td>\nInbound\/Outbound connection from\/to the ePO server\/Agent Handler.<\/font><\/td>\n<\/tr>\n
8081<\/font><\/td>\nTCP<\/font><\/td>\nInbound\/Outbound connection from\/to the ePO server\/Agent Handler.<\/font><\/td>\n<\/tr>\n
8082<\/font><\/td>\nUDP<\/font><\/td>\nInbound connection to Agents. Inbound\/Outbound connection from\/to SuperAgents.<\/font><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

<\/p>\n


<\/font>SQL Server:<\/u><\/p>\n

<\/font><\/strong> <\/p>\n\n\n\n\n\n
Default Port<\/font><\/strong><\/td>\nProtocol<\/font><\/b><\/td>\nTraffic direction<\/font><\/strong><\/td>\n<\/tr>\n
1433<\/font><\/td>\nTCP<\/font><\/td>\nInbound connection from the ePO server\/Agent Handler.<\/font><\/td>\n<\/tr>\n
1434<\/font><\/td>\nUDP<\/font><\/td>\nInbound connection from the ePO server\/Agent Handler.<\/font><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

<\/div>\n<\/div>\n<\/div>\n

<\/div>\n
<\/div>\n
<\/div>\n
\n

<\/font>Related Information <\/font><\/h3>\n
KB55718<\/font><\/a> – Ports required by ePolicy Orchestrator 3.6.1 for communication through a firewall<\/font><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Environment McAfee ePolicy Orchestrator 4.xMcAfee Agent 4.x For details of all supported operating systems, see KB51109. Summary The following tables display the ports needed by ePolicy Orchestrator (ePO) 4.x for communication through a firewall: McAfee ePolicy Orchestrator 4.0 Port Default … Weiterlesen →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[137],"tags":[140,75,139,138],"class_list":["post-1114","post","type-post","status-publish","format-standard","hentry","category-mcafee","tag-epo","tag-firewall","tag-mcafee-2","tag-ports"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p1ByMg-hY","_links":{"self":[{"href":"http:\/\/www.schertel.net\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/1114","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.schertel.net\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.schertel.net\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.schertel.net\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.schertel.net\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1114"}],"version-history":[{"count":0,"href":"http:\/\/www.schertel.net\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/1114\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.schertel.net\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1114"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.schertel.net\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1114"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.schertel.net\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1114"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}