Here is a detailed breakdown of how SEP works on ARM64.
Enterprise IT landscapes are shifting rapidly toward energy-efficient ARM64 hardware, led by Apple Silicon (M1/M2/M3), Qualcomm Snapdragon X Elite Windows laptops, and AWS Graviton Linux servers. Deploying enterprise security to these environments requires an understanding of how Broadcom manages ARM64 security agents. π Central Compatibility and Management Matrix
You cannot deploy ARM64 endpoints using an on-premises management system. Broadcom enforces specific control rules for ARM-based hardware architectures. Management Server Rule
Note that unmanaged installations require manual signature management via native LiveUpdate processes. Critical Feature Gaps on ARM64
For further technical details, you can refer to the official Broadcom Knowledge Base which details current ARM limitations. symantec endpoint protection arm64 work
Due to the unique nature of the ARM64 architecture, certain legacy or specialized features are : Application Control and Exploit Protection. Threat Defense for Active Directory (AD).
: Specific protections for older versions of Firefox or legacy Internet Explorer do not apply.
: Traditional on-premises SEPM infrastructure cannot compile or push policies to ARM64 installations. Security groups must migrate to the Symantec Endpoint Security (SES) Cloud Console . Feature Parity vs. ARM64 Functional Gaps
ββββββββββββββββββββββββββββββββββββββββββ β Symantec Agent ARM64 Deployment β βββββββββββββββββββββ¬βββββββββββββββββββββ β ββββββββββββββββββββββββββββ΄βββββββββββββββββββββββββββ βΌ βΌ ββββββββββββββββββββββββββββββββββββββ ββββββββββββββββββββββββββββββββββββββ β Cloud-Managed (ICDm) β β Unmanaged / Self-Managed β ββββββββββββββββββββββββββββββββββββββ€ ββββββββββββββββββββββββββββββββββββββ€ β β’ Download SES installer package β β β’ Locate Full_Installation media β β β’ Select Windows ARM architecture β β β’ Extract manual setup files β β β’ Centrally deploy policies β β β’ Run locally on the client β ββββββββββββββββββββββββββββββββββββββ ββββββββββββββββββββββββββββββββββββββ Option 1: Cloud-Managed SES Deployment Log into your enterprise Symantec Security Cloud Console . Navigate to the installation packages generation wizard. Here is a detailed breakdown of how SEP works on ARM64
In summary, . Whether you're managing a fleet of Windows on Arm laptops powered by Snapdragon, MacBooks with lightning-fast M3 chips, or Linux servers on aarch64 architecture, SEP provides comprehensive and robust protection.
Because of the ARM64 security model, simply installing the software is not enough. The user (or MDM administrator) must approve the System Extension loading.
: Native ARM support is currently limited to unmanaged (self-managed) or cloud-managed clients (via the Integrated Cyber Defense Manager or ICDm). There is no support for managing ARM endpoints through an on-premises Symantec Endpoint Protection Manager (SEPM).
: Native ARM64 support is integrated with the Integrated Cyber Defense Manager (ICDm), also known as the Symantec Endpoint Security (SES) cloud console. π Central Compatibility and Management Matrix You cannot
| Metric | x64 Reference | ARM64 (emulated) | Delta | |--------|---------------|------------------|-------| | Boot time impact | +8 sec | +22 sec | +175% | | On-access scan (1 GB .zip) | 4.2 sec | 11.8 sec | +181% | | CPU usage (idle) | 0β2% | 5β9% | +250% | | Signature update (50 MB) | 12 sec | 34 sec | +183% |
Symantec Endpoint Protection (SEP) provides native support for ARM64 architecture on both Windows and macOS, though there are specific management and feature limitations to note as of early 2026. Windows on ARM64 Support
You can install a standalone package from the full SEP installation download. Step-by-Step Setup Guide 1. Preparation & Compatibility