Symantec Endpoint Protection Arm64 Work Patched

Getting Symantec Endpoint Protection (SEP) to run on ARM64 (like the Microsoft Surface Pro X or newer Snapdragon-powered laptops) requires a specific setup. Broadcom transitioned management of these devices primarily to the cloud-based Symantec Endpoint Security (SES) platform. The Main Catch: Managed vs. Unmanaged

2. Linux on ARM64 (The Success Story)

If your ARM64 environment is Linux-based (common in data centers running AWS Graviton or Oracle Ampere A1 instances), the news is excellent. symantec endpoint protection arm64 work

Verdict: For a road warrior with a Surface Pro X, SEP is usable but sluggish. For a virtual desktop (VDI) on Azure ARM64, you should stress-test heavily. Getting Symantec Endpoint Protection (SEP) to run on

3. SEPM Communication Fails on Linux ARM64

• Problem: The client installs but never appears in the SEPM console.
• Cause: DNS resolution or certificate mismatch. On AWS Graviton, the default network interface may have strict iptables.
• Fix: Manually set the SEPM server IP in /opt/Symantec/symantec_antivirus/sylink.xml. Restart the service: systemctl restart sep.

Kernel Support: SEP for Linux relies on specific kernel modules. From 14.3 RU8, cloud-managed agents use LiveUpdate to automatically upgrade these modules. Problem: The client installs but never appears in

A. Emulation vs. Native

Currently, the Symantec Endpoint Protection client for Windows on ARM operates primarily through emulation or hybrid compatibility provided by the Windows OS.

• Look for SymantecEndpointProtection_14.3.x_x86.exe (not x64).

For further technical details, you can refer to the official Broadcom Knowledge Base which details current ARM limitations.

The Good News: It Does Work (via Emulation)

For most enterprise use cases, the current x64 version of Symantec Endpoint Protection installs and operates successfully on Windows 11 Arm64 systems.