tttttt

If using default LiveUpdate, your clients would connect to a LiveUpdate server on HTTP 80 or HTTPS 443. Check LiveUpdate logging: C:\ProgramData\Symantec\Symantec Endpoint Protection\CurrentVersion\Data\Lue\Logs