When installing SEP on an ARM64 machine, the native installer automatically negotiates with the operating system. If you enable the policy, the client automatically deactivates Windows Defender Firewall to prevent conflicting dual-filtering latency. If you do not deploy the Symantec Firewall module, Windows Defender remains active alongside Symantec's core antivirus agent to protect network vectors. Microsoft Trusted Signing Requirements
April 12, 2026 Subject: Compatibility, deployment, and functional limitations of SEP on ARM64 architectures.
Deploying Symantec Endpoint Protection on ARM64: Compatibility, Configuration, and Feature Limitations
Apple's transition from Intel chips to its own Apple Silicon (M1, M2, M3, and newer) has been rapid and comprehensive. SEP has kept pace. symantec endpoint protection arm64 work
Deployment on macOS is typically handled through central management tools. The latest managed client for ARM64 Macs can be obtained by running from your Symantec Endpoint Protection Manager (SEPM) , which will retrieve the most current macOS agent.
Symantec Endpoint Protection on ARM64 in 2026, but the best experience is found through native, modern cloud-managed agents rather than legacy x86 agents running under emulation. As ARM64 becomes a standard for enterprise laptops, ensuring native security deployment is vital for maintaining performance without sacrificing protection.
Organisations have two primary implementation paths to install Symantec security agents on ARM64 systems: When installing SEP on an ARM64 machine, the
: Devices must be managed via the Integrated Cyber Defense Manager (ICDm) cloud interface. Alternatively, the agent can be deployed as an unmanaged client package extracted from the Broadcom Full Installation file. On-premises SEPM systems cannot control these agents. macOS (Apple Silicon) Implementation
The development of ARM64 support for Symantec Endpoint Protection is an ongoing effort. The transition from version 14.3 RU10 to the dedicated agent is a significant milestone that has simplified deployment and expanded feature support, particularly for Windows on ARM.
: Starting with recent agent builds (such as 14.3 RU8 and later), the endpoint operating system must natively support Microsoft Trusted Signing. While Windows 11 handles this natively, ensure no enterprise security policies or stripped corporate images have blocked the required root certificates. Deployment on macOS is typically handled through central
Known Issues in Symantec Endpoint Security - Broadcom TechDocs 25 Feb 2026 —
Potential lags in threat detection during critical scenarios.
: Native ARM support is currently limited to unmanaged (self-managed) or cloud-managed clients (via the Integrated Cyber Defense Manager or ICDm). There is no support for managing ARM endpoints through an on-premises Symantec Endpoint Protection Manager (SEPM).