Endpoint Security Server And Client Communication; Smartendpoint Console And Server To Server Communication - Check Point HARMONY R81 Administration Manual

Endpoint Security Server and Client
Communication
Endpoint Security functionality is based on secure communication between all Endpoint
Security servers and clients.
Endpoint Security operations are implemented by different services on the Endpoint Security
Management Server, Endpoint Policy Servers, SmartEndpoint console, and Endpoint Security
clients.
Important - Make sure that
n HTTP (TCP/80) and HTTPS (TCP/443) services and ports are allowed by
Firewall or Application Control rules.
n There is routing between the Endpoint Security elements.

SmartEndpoint Console and Server to Server Communication

Communication between these elements uses the Check Point Secure Internal
Communication (SIC) service. The elements authenticate each other using certificates.
HTTPS (TCP/443) is used for sending events, for SmartEvent Views and Reports, from the
Endpoint Policy Server to Primary Management.
Service
(Protocol/Port)
SIC (TCP/18190 -
18193)
SIC (TCP/18221)
HTTPS
(TCP/443)

Endpoint Security Server and Client Communication

Communication
SmartEndpoint
console to Endpoint
Security
Management
Servers
Endpoint Policy
Server to Endpoint
Security
Management
Servers
Endpoint
Secondary to
Primary
Management
Endpoint Policy
Server to Primary
Management
Notes
Endpoint Policy Server distribute and reduce
the load of client-server communication
between the clients and the Endpoint Security
Management Server.
Used for sending monitoring events.
R81 Harmony Endpoint Server Administration Guide | 26