How to configure the Symantec Endpoint Protection Manager to run with a custom HTTP port

Symantec.com > Enterprise > Support > Knowledge Base

How to configure the Symantec Endpoint Protection Manager to run with a custom HTTP port

Question/Issue:
You need to run Symantec Endpoint Protection Manager with a custom HTTP port, either on a custom Web site or the Default Web site. This configuration is useful when you have other sites that run on port 80 that conflict with Symantec Endpoint Protection Manager. It also helps to secure sites if you run them on nonstandard ports.

Solution:
If you have already installed the Symantec Endpoint Protection Manager onto the default Web site, then skip to "Configuring Symantec Endpoint Protection Manager to use a custom HTTP port."
If it is a new installation, begin from "Installing Symantec Endpoint Protection Manager using a custom Web site."

Installing Symantec Endpoint Protection Manager using a custom Web site

Execute the Symantec Endpoint Protection Manager installer.
Select Create a custom Web site and proceed with the installation.

After the installation is complete, a site called "Symantec Web Server" exists in IIS.

Note: A change in the TCP port on your default Web site may affect other applications that currently run on that site.

Configuring Symantec Endpoint Protection Manager to use a custom HTTP port

Stop the "Symantec Endpoint Protection Manager" service.
Open IIS.
Right-click the Web site on which Symantec Endpoint Protection Manager resides.
Click Properties.
Under TCP port, enter the HTTP port number you want to use.
Click OK.
In a text editor such as Notepad, open the following file:

C:\Program Files\Symantec\Symantec Endpoint Protection Manager\Tomcat\etc\conf.properties
Check for the following line in the conf.properties file. Add the line to the bottom of the file if it does not already exist. Replace <port> with your chosen port number:

scm.iis.http.port=<port>

For example, if you chose port 8080, the line should appear as follows:

scm.iis.http.port=8080
Save and close the file.
Restart the server that hosts Symantec Endpoint Protection Manager.

Next, confirm whether the custom port has been configured in the Default Management Server List.

To confirm whether the custom port has been configured in the Default Management Server List

In Symantec Endpoint Protection Manager, click Policies> Policy Components> Management Server Lists.
Edit the Default Management Server List.
Confirm whether or not the custom port has been configured for the servers inside the list. If it has, then skip to Changing the Sylink.xml file to reflect the correct HTTP Port for existing clients. If it has not, then continue to Configuring Symantec Endpoint Protection 11.0 clients to use the custom HTTP port.

Configuring Symantec Endpoint Protection 11.0 clients to use the custom HTTP port

In Symantec Endpoint Protection Manager, click Policies> Policy Components> Management Server Lists.
Click Add a new Management Server List.
Enter a name for the new list.
Check Use HTTP Protocol.
Click Add> New Server.
Enter the IP address or computer name of the computer that hosts Symantec Endpoint Protection Manager.
Check Customize HTTP port.
Enter your chosen port number.
Click OK.
Right-click the new Management Server List, and click Assign.
Select the groups to which you want to assign the Management Server List.
Click Assign.

Change the Sylink.xml file to reflect the correct HTTP Port for existing clients.
If you do not have existing clients, skip to Changing the Sylink.xml file to reflect the correct HTTP Port for new clients.

Log on to the client computer.
Click Start > Run, type smc -stop, and click OK.
In a text editor such as Notepad, open C:\Program Files\Symantec\Symantec Endpoint Protection\Sylink.xml.

Note: The folder may alternately be C:\Program Files\Symantec\Symantec AntiVirus\.
Locate the following line:

<Server Address="X.X.X.X" HttpVerifyCA="0" Verify Signatures="1" />
Add the "HttpPort" string to the line as follows:

<Server Address="X.X.X.X" HttpPort="<port>" HttpsVerifyCA="0" Verify Signatures="1" />
Save and close the file.
Click Start > Run, type smc -start, and click OK.
A green dot appears on the Symantec Endpoint Protection 11.0 icon in the notification area of the taskbar. This green dot indicates that it has successfully connected to the Symantec Endpoint Protection Manager.

Change the Sylink.xml file to reflect the correct HTTP Port for new clients

In Symantec Endpoint Protection Manager, on the Admin tab, click Install Packages.
Right-click the Symantec Endpoint Protection 11.0 32-bit package (or 64-bit if applicable), and then click Export.
Select a folder to which the package should be exported.
Uncheck Single Executable.
Select the group to which you want to install the client.
After the export completes, browse to the folder of the exported package.
Make a copy of the file Sylink.xml on removable media.
On the client computer, click Start> Run, type smc -stop, and click OK.
Copy the Sylink.xml file from the removable media into the Symantec Endpoint Protection installation folder, and replace any existing Sylink.xml file.
The installation folder may be either C:\Program Files\Symantec\Symantec Endpoint Protection\ or C:\Program Files\Symantec\Symantec AntiVirus\.
Click Start > Run, type smc -start, and click OK.
A green dot appears on the Symantec Endpoint Protection 11.0 icon in the notification area of the taskbar. This green dot indicates that it has successfully connected to the Symantec Endpoint Protection Manager.

References:
This document is available in the following languages:

Available Translations:

Document ID: 2007111212591048
Last Modified: 10/27/2008
Date Created: 11/11/2007
Product(s): Endpoint Protection 11
Release(s): Endpoint Protection 11.0