> Source: [sk100439](https://support.checkpoint.com/results/sk/sk100439)

# sk100439 - Policy Server is not able to connect to Endpoint Security Management Server

| Property | Value |
|----------|-------|
| Solution ID | sk100439 |
| Date Created | 2014-05-01 |
| Last Modified | 2017-02-25 |
| Technical Level | Advanced |
| Products | Endpoint Security |
| Versions | Cloud, E89.X, E88.X, R82.20, R82.10, R82, R81.20 |
| OS | Windows |

## Symptoms

- * SmartEndpoint - '`Reporting`' tab - '`Activity Reports`' - '`Endpoint Policy Server Status`' - shows that Endpoint Policy Server is '`Not Available`'.

* SmartEndpoint - '`Reporting`' tab - '`Activity Reports`' - '`Endpoint Connectivity by Policy Server`' - shows that last contact with Endpoint Policy Server is '`N/A`'.

* Output of the '`cpwd_admin list`' command on Endpoint Policy Server shows that the State of the '`SICTUNNEL`' is '`Terminated`' ("T").

  *Example*:

  ```
  
  APP        PID    STAT  #START  START_TIME             COMMAND              MON  
  SICTUNNEL  2168   T     1       [14:00:08] 22/11/2013  "C:\Program Files\CheckPoint\CPShared\R77\bin\cptnl.exe" -c "C:\Program Files\CheckPoint\CPuepm\E80.40\engine\conf\cptnl_srv.conf" N
  ```

* Output of the '`netstat -an | findstr 1081`' command on Endpoint Policy Server shows some process is listening on TCP port 1081:

  *Example*:

  ```
  
    Proto  Local Address          Foreign Address        State
    TCP    127.0.0.1:1081         0.0.0.0:0              LISTENING
  ```

* After resetting SIC between Endpoint Security Management Server and Endpoint Policy Server, the `%UEPMDIR%\logs\server_messages.log` file on Endpoint Policy Server shows repeatedly:

  ```
  
  ERROR - Failed to establish a connection with SIC Tunnel. Reason: java.net.SocketTimeoutException: Read timed out
  ERROR - Failed to open SIC-HTTP connection. Error message "Failed to establish a connection with SIC Tunnel. Reason: java.net.SocketTimeoutException: Read timed out"
  WARN - Error registering Connection Point
  java.lang.Exception: no active server found
  ```

## Cause

Possible reason: TCP port 1081 on the Endpoint Policy Server is occupied by another process (this port is used for the communication between the Endpoint Policy Server and the Primary Endpoint Security Management Server).

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content