Agents fail to connect, activate, or update definitions


Article ID: 158621


Updated On:


Endpoint Protection Small Business Edition (Cloud)


Symantec Endpoint Protection Small Business Edition (SEP SBE) agents fail to connect, activate, or update definitions.

To prevent these issues, you need to know which URLs that SEP SBE requires access to.


A proxy or content filtering appliance in your network environment is likely blocking connection the servers, or a content filtering appliance is corrupting the content.


To maintain proper functionality, SEP SBE agents require access to the following URLs over ports 80 and 443. A CSV with these URLs can be found below:

Note: If an application firewall is in use, the whitelist should extend to the IPS section, and you need to disable "Deep Packet Inspection"

URL Function Heartbeat check-in Virus definition updates Back-end eeporting Fault data collection analysis server Reputation database Primary activation URL Secondary activation URL CloudConnect activation URL

Keepalive messages are submitted to and from this URL for online or offline status.

PA, AV, and BA messages are transmitted to and from this URL for in-depth status (viruses, backup messages, etc). Installation URL for installing PA, AV, and BA. The extractor uses this URL. Management console Partner management console Activation Help system Help system

Alternative option

Alternatively, whitelisting the following domains will help ensure proper client communications:

  • *
  • *
  • *
  • *
  • *


To learn how to test and confirm connectivity to installation and activation URLs, see Errors or failures when installing or activating agents.


SBE_Cloud_URLs.csv get_app