Symantec Endpoint Protection Server

Symantec Endpoint Protection Server

This template allows you to monitor Symantec Endpoint Protection Server services and major TCP ports.

Prerequisites:WMI access to target server.

Credentials:Administrator on target server.

Monitored Components

Service: Symantec Embedded Database

This monitor returns the CPU and memory usage of the Symantec Embedded Database service. This service is responsible for the embedded database used by the Symantec Endpoint Protection Manager.

Service: Symantec Endpoint Protection Manager

This monitor returns the CPU and memory usage of the Symantec Endpoint Protection Manager service. This service is responsible for the application server which communicates with the Symantec Endpoint Protection Manager, Symantec Protection clients, and database.

Service: Symantec Endpoint Protection Manager Webserver

This monitor returns the CPU and memory usage of the Symantec Endpoint Protection Manager Webserver service. This service allows you to communicate with the SEPM manager using a web interface.

SEPM manager old TCP port

This component monitor tests the ability of a SEPM service to accept incoming sessions. This port is used for communication between the SEPM manager and the SEP clients and Enforcers. By default, port 80 is monitored. Port 8014 is used for builds MR3 and later.

SEPM manager new TCP port

This component monitor tests the ability of a SEPM service to accept incoming sessions. This port is used for communication between the SEPM manager and the SEP clients and Enforcers. By default, port 80 is monitored. Port 8014 is used for builds MR3 and later.

HTTPS web console port

This component monitor tests the ability of an HTTPS web console to accept incoming sessions. This port is used in HTTPS communications between a remote management console and the SEPM manager. All login information and administrative communication takes place using this secure port. By default, port 8443 is monitored.

Remote web console port

This component monitor tests the ability of an HTTP web console to accept incoming sessions. This port is used in initial HTTP communications between a remote management console and the SEPM manager. (This communication is used only to display the login screen.) By default, port 9090 is monitored.

Portions of this document were originally created by and are excerpted from the following sources:

Symantec Corporation, “Tech102748”, Copyright Copyright 2012, Symantec Inc.  All rights reserved. 
Available at
http://www.symantec.com/business/support/index?page=content&id=TECH102748