Targeted protection for ARM64-based cloud workloads and servers running in environments like AWS (Graviton instances) or Azure ARM-based virtual machines. Core Security Features Optimized for ARM
: For cloud management, you must select the "Windows ARM" architecture specifically when downloading the installation package from the Symantec Endpoint Security console Available Protection Features
Hotfixes can be applied with:
Organizations using the SES cloud console can create and deploy ARM64 installation packages directly:
for on-premises management via Symantec Endpoint Protection Manager (SEPM). You must use the Symantec Endpoint Security (SES) cloud console to manage these devices. Operating System : Supports Windows 11 (21H2, 22H2). Unsupported Features on ARM64 Application Control. Exploit Protection. Threat Defense for AD. Custom Application Behavior. Legacy Internet Explorer/Firefox-based Browser Protection. Broadcom support portal How to Install Cloud-Managed : Select the Windows ARM architecture symantec endpoint protection arm64 hot
In SEP versions prior to 14.3 RU9, the ARM64 client had a bug where ccSvcHst.exe would repeatedly scan the same memory pages of translated x64 apps (like Office or Chrome). This created a "hot loop" that spiked CPU to 99% for minutes at a time. Apply hotfix KB-2024-03-ARM64 (available via Broadcom support portal).
Most standard security features are available, but several advanced "hot" protection layers are on ARM64 as of early 2026: Application Control and Custom Application Behavior. Threat Defense for Active Directory . Web and Cloud Access Protection . Operating System : Supports Windows 11 (21H2, 22H2)
| Step | Action | |------|--------| | 1 | Verify your SEP version. Open About Symantec Endpoint Protection . Need 14.3 RU8 (build 11200 or higher). | | 2 | If older, download the ARM64 client from Broadcom (login required): https://support.broadcom.com/ > SEP > 14.3 RU9 > Clients > ARM64 | | 3 | Uninstall the old x64 emulated client via Control Panel. | | 4 | Install the new ARM64 native client: SEP_14.3.0_ARM64_Client_EN.exe /s /q | | 5 | Reboot. Monitor CPU temp via HWMonitor or Task Manager. Normal idle should be <5% CPU. |