Check Point HARMONY R81 - Endpoint Security Server and Client Communication; Smartendpoint Console and Server to Server Communication

Endpoint Security Server and Client Communication
R81 Harmony Endpoint Server Administration Guide|26
Endpoint Security Server and Client
Communication
Endpoint Security functionality is based on secure communication between all Endpoint
Security servers and clients.
Endpoint Security operations are implemented by different services on the Endpoint Security
Management Server, Endpoint Policy Servers, SmartEndpoint console, and Endpoint Security
clients.
Important - Make sure that
n
HTTP (TCP/80) and HTTPS (TCP/443) services and ports are allowed by
Firewall or Application Control rules.
n
There is routing between the Endpoint Security elements.
SmartEndpoint Console and Server to Server Communication
Communication between these elements uses the Check Point Secure Internal
Communication (SIC) service. The elements authenticate each other using certificates.
HTTPS (TCP/443) is used for sending events, for SmartEvent Views and Reports, from the
Endpoint Policy Server to Primary Management.
Service
(Protocol/Port)
Communication Notes
SIC (TCP/18190 -
18193)
SmartEndpoint
console to Endpoint
Security
Management
Servers
Endpoint Policy
Server to Endpoint
Security
Management
Servers
Endpoint Policy Server distribute and reduce
the load of client-server communication
between the clients and the Endpoint Security
Management Server.
SIC (TCP/18221) Endpoint
Secondary to
Primary
Management
HTTPS
(TCP/443)
Endpoint Policy
Server to Primary
Management
Used for sending monitoring events.