During the Manager installation, configurational scripts are run automatically to harden the operating system as a best practice. After the configuration, only the ports required for communication between the Manager and point integrations, such as Sensor, ePolicy Orchestrator, and Alert Service, are open. The communication on the non-essential ports is disabled.
Reconfiguration of IP tables, and ports used by the Manager and Sensor, integrated products, and other third-party applications for communications
For more information on the IP Table configuration after running the reconfiguration script, ports and traffic destinations as used by the Manager and Sensor, and ports used by third-party applications and integrated products, such as NTBA, Intelligent Sandbox, ePO, and IVX, refer to the section Set the desktop firewall.
For information on how to disable or enable firewall ports in MLOS, refer to the section Steps to disable or enable ports on firewall in MLOS in the Trellix Intrusion Prevention System Manager Appliance Product Guide.