I do not need a solution (just sharing information)
So i just discovered that their is a new TCP port for 12.1.5, this port is 8447 as listed in the article below...
http://www.symantec.com/business/support/index?page=content&id=TECH163787
It says it for semlaunchsrv.exe:
Added in 12.1.5. Only at localhost's request, this service virtual account launches processes that require higher privileges so that other Symantec Endpoint Protection Manager services do not require them.
So my question is does anyone know what this can be used for?