Corporate KnowledgeBase

Ports needed by ePO 4.0 and 4.5 for communication through a firewall

Corporate KnowledgeBase ID: KB66797

Last Modified: December 02, 2010

Environment

McAfee Agent 4.x

McAfee ePolicy Orchestrator 4.x

For details of all supported operating systems, see KB51109 (index?page=content&id=KB51109) .

Solution

McAfee ePolicy Orchestrator 4.0

Port Default Description Traffic direction

Inbound/Outbound
Agent to server TCP port opened by the ePO Server service to
80 connection to the ePO
communication port receive requests from agents.
server.
Agent wake-up TCP port opened by agents to receive agent Outbound connection
8081
communication port wakeup requests from the ePO server. from the ePO server.

Agent broadcast
8082
communication port
Console-
to-application server 8443
communication port
Sensor-to-server
8444
communication port
Security threats
8801
communication port
SQL server TCP port 1433
UDP port opened by agents to receive UDP
Outbound connection
broadcasts (Used by Superagents to forward
from the ePO server.
messages from the ePO server).
HTTPS port opened by the ePO Application Server Inbound connection to
service to allow web browser UI access. the ePO server.
HTTPS port opened by the ePO Application Server
service to receive RSD and Event Parser
Inbound connection to
connections. Also, used by the Agent Handler to
the ePO server.
talk to the ePO server to get required information
(like LDAP servers).
HTTP port hosted by McAfee Labs for retrieving
Outbound connection
security threat feed. Note that this port cannot be
from the ePO server.
changed.
TCP port used to communicate with the SQL
Outbound connection
server. This port is specified or determined
from the ePO server.
automatically during the setup process.

McAfee ePolicy Orchestrator 4.5

Port Default Description Traffic direction

Inbound/Outbound
Agent to server TCP port opened by the ePO Server service to
80 connection to the ePO
communication port receive requests from agents.
server.
Agent
communicating By default, 4.5 agents should communicate over SSL Inbound connection to
443
over SSL (4.5 (443 by default). the ePO server.
agents only)
Agent wake-up TCP port opened by agents to receive agent wakeup Outbound connection
8081
communication port requests from the ePO server. from the ePO server.
UDP port opened by agents to receive UDP
Agent broadcast Outbound connection
8082 broadcasts (Used by Superagents to forward
communication port from the ePO server.
messages from the ePO server).
Console-
HTTPS port opened by the ePO Application Server Inbound connection to
to-application server 8443
service to allow web browser UI access. the ePO server.
communication port
HTTPS port opened by the ePO Application Server
service to receive RSD and Event Parser connections.
Sensor-to-server Inbound connection to
8444 Also, used by the Agent Handler to talk to the ePO
communication port the ePO server.
server to get required information (like LDAP
servers).
HTTP port hosted by McAfee Labs for retrieving
Security threats Outbound connection
8801 security threat feed. Note that this port cannot be
communication port from the ePO server.
changed.
TCP port used to communicate with the SQL
Outbound connection
SQL server TCP port 1433 server. This port is specified or determined
from the ePO server.
automatically during the setup process.
Default LDAP server User Based Policies use the LDAP connection to look Outbound connection
389
port up users, groups, and Organizational Units. from the ePO server.
Default SSL LDAP User Based Policies use the LDAP connection to look Outbound connection
636
server port up users, groups, and Organizational Units. from the ePO server.

For information on Agent Handler ports, see PD22508 (index?page=content&id=PD22508) .

Related Information

KB55718 (index?page=content&id=KB55718) - Ports needed by ePolicy Orchestrator 3.6.1 for communication through a firewall