To address the challenges of traditional endpoint protection on ARM64, Symantec has developed a version of SEP specifically designed for ARM64-based devices. Symantec Endpoint Protection on ARM64 offers:
: Native ARM64 devices currently require management through the Symantec Endpoint Security (SES) cloud console , as the on-premises Symantec Endpoint Protection Manager (SEPM) does not yet support managing ARM64 endpoints. System Prerequisites : symantec endpoint protection arm64 hot
If you are deploying via script or command line, you must ensure the MSI checks the architecture correctly. To address the challenges of traditional endpoint protection
ARM64 clients generally support core security features, though some specialized policies may vary by platform: Broadcom TechDocs Virus and Spyware Protection : Real-time scanning and scheduled scans. Intrusion Prevention (IPS) : Protection against network-level exploits. : Standard network traffic filtering. Exceptions & LiveUpdate Exceptions & LiveUpdate SEP offloads signature scanning to
SEP offloads signature scanning to AES-NI instructions. On some Qualcomm Snapdragon X Elite chips, these instructions are emulated instead of passed to the crypto engine, causing a 300% increase in scan time and thermal output. Disable "Enable hardware virtualization" in SEP policy > Advanced Settings > Performance.
They were naked on the network.