2967
Symantec Endpoint Protection
Medium RiskTCP — Security & VPN
Port Overview
Port Number
2967
Service Name
Symantec Endpoint Protection
Transport Protocol
TCP
Category
Security & VPN
Security Risk
Medium
Port Range
Registered (1024-49151)
What is Port 2967?
Port 2967 is used by Symantec (now Broadcom) Endpoint Protection Manager for communication between the management server and endpoint agents. Security administrators use this port to push policy updates, receive threat alerts, and manage antivirus definitions across managed endpoints. It is a core port in enterprise Symantec Endpoint Protection deployments.
TCP
Security & VPN
Commonly Used
Security Considerations
Port 2967 (Symantec Endpoint Protection) is classified as medium risk. While this service is commonly exposed, consider using encrypted alternatives where available.
Recommendation: Keep the service updated. Monitor logs for unusual activity.