Which ports are required for MacOS to use Symantec Web Security Service (WSS)?

Products

• Cloud Secure Web Gateway - Cloud SWG
• Endpoint Protection
• Endpoint Security

Issue/Introduction

You need to know what the port requirements are for Mac clients to allow WSS traffic.

By default, the Mac firewall is not activated, but the administrator may have configured this differently. The Mac Operating System does not have an application-based firewall service. Ports must be opened directly unlike a Windows application firewall.

Environment

• Mac OS
• Web Security Service (WSS) on SEP RU6

Resolution

A Mac client, using WSS to communicate to the WSS cloud service, requires these outbound ports:

• 80   TCP
• 443 TCP
• 443 UDP

These ports need to be open for WSS traffic. The destination Data Center IP address will depend on the location of the Mac and the configuration of WSS.

Additional Information

For Datacenter locations please see https://knowledge.broadcom.com/external/article/167174/web-security-service-wss-ingress-and-egr.html

WSS IP/port and required protocols information:
https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/web-security-service/help/wss-reference/ref-openports.html