Currently, the Symantec Endpoint Protection client for Windows on ARM operates primarily through or hybrid compatibility provided by the Windows OS.
Symantec Endpoint Protection (SEP) provides native support for ARM64 architectures across Windows, macOS, and Linux, primarily starting with version . However, management and feature availability vary significantly by platform. Windows on ARM Support
If you're using a version of the Mac client older than on a new Apple Silicon Mac, you might see an error: "This version of Symantec Agent for Mac is not supported on Apple M1 chip." This occurs because the installer incorrectly checks for the presence of Rosetta translation technology. To resolve this, you must upgrade to at least SEP 14.3 RU3 or later.
: To successfully deploy SEP on ARM64, administrators must use the Symantec Endpoint Security (SES) cloud console .
: Active Directory-specific defenses are unavailable. symantec endpoint protection arm64 work
installer from the SES cloud console or the "Full_Installation" download of SEP for unmanaged use. Environment Check
When deploying SEP to an Apple Silicon device (M1/M2/M3), you are installing a .
If your enterprise is standardizing on Windows on ARM, you have a decision to make: accept the performance tax of running SEP under emulation, or migrate to a security stack that has already invested in native ARM64 development (e.g., Microsoft Defender, CrowdStrike, or SentinelOne).
The pressure is mounting. With Qualcomm’s Snapdragon X Elite promising to rival Apple’s M-series chips, enterprises are beginning large-scale Arm64 deployments. Windows on ARM Support If you're using a
: Support includes Windows 11 GA builds (21H2 through 25H2).
If a native ARM64 installation continuously aborts or rolls back, verify that all core Windows updates are completed. Missing Microsoft Trusted Signing verification certificates on older, unpatched Windows installations will block the Symantec kernel level driver from loading properly.
: Tested on Qualcomm Snapdragon (7c and later) and Ampere Altra processors.
You can run the tool with the --arch ARM64 parameter to ensure you are working with the correct architecture. For example, the following command downloads the latest Linux agent installer for RHEL 8 and RHEL 9, but specifically for the Arm64 architecture: : Active Directory-specific defenses are unavailable
Known Issues in Symantec Endpoint Security - Broadcom TechDocs 25 Feb 2026 —
Broadcom's "cloud-first" agent (SESC) has superior native ARM64 capabilities compared to the traditional SEP 14.x client.
Native applications utilize the ARM CPU directly, leading to faster file scanning, lower CPU usage, and improved system responsiveness. Emulated security software can cause a 10%–20% performance drag.