However, support for ARM64 is not uniform across all product versions:
Symantec_Endpoint_Protection_14.3.0_RU8_WinArm64-bit_Client_EN.exe
To help tailor this technical rollout to your enterprise infrastructure, consider exploring the following next steps:
Traditionally, SEP was built for x86 and x64 Windows systems, with separate packages for macOS, Linux, and mobile platforms.
Traditional endpoint protection solutions, including SEP, were initially designed for x86-based architectures. As a result, they may not be optimized for ARM64-based devices, which can lead to: symantec endpoint protection arm64 hot
— Source: Broadcom Knowledge Base
. Must be managed via the Integrated Cyber Defense Manager (ICDm) cloud console. Unmanaged Deployments
As ARM64-based Windows devices (e.g., Microsoft Surface Pro X, Lenovo ThinkPad X13s, newer Snapdragon X Elite laptops) enter enterprise environments, legacy x86 security agents face performance and compatibility challenges. Symantec Endpoint Protection (SEP) originally ran under emulation (CHPE or x64 emulation) on these devices, causing high CPU usage, scan delays, and potential instability.
Symantec’s firewall and Intrusion Prevention System (IPS) are built natively into the network stack of ARM64 operating systems. It intercepts malicious network traffic and blocks exploits before they reach vulnerabilities, maintaining the low-latency connectivity that ARM users expect. 3. Exploit Mitigation and EDR However, support for ARM64 is not uniform across
Pivot to the target group policy options and trigger .
Within 48 hours, the Frankfurt warehouse showed "Managed" again. But more importantly, performance telemetry showed something shocking: The ARM64 native client used 40% less CPU than the x86 emulated version did on the same hardware. Scans that took 8 minutes took 3. Real-time file monitoring added zero lag to the SSD.
Access the Broadcom Support Portal or download the media package for your version.
Stay tuned for Broadcom release notes to track expanding ARM64 capabilities in future SEP versions. As the "hot" topic continues to evolve, this guide will serve as your living reference for Symantec Endpoint Protection ARM64 deployment and management. Must be managed via the Integrated Cyber Defense
: Broadcom has planned backend maintenance for Endpoint Security on April 29-30, 2026 , which may cause temporary console slowness.
| Supported Features | Excluded (Not Supported) on ARM64 | |--------------------|-----------------------------------| | Anti‑malware (virus, spyware) | Custom Application Behavior | | SONAR behavioral detection | Threat Defense for Active Directory | | Firewall (basic) | Web and Cloud Access Protection | | Intrusion Prevention (limited) | Exploit Mitigation (Memory exploit protection) | | Device Control | Legacy Internet Explorer / Firefox‑based Browser Protection |
As of version 14.3 RU7 and newer, ARM support is only for unmanaged (self-managed) or cloud-managed clients. There is no support for managed endpoints for on-premises Symantec Endpoint Protection Manager (SEPM).