Symantec Endpoint Protection (SEP) 14.3 RU10, released in early 2025, continues Broadcom’s push toward unified security by bringing advanced cloud-born features into on-premises management
- Inventory your clients – identify any Windows 7/Server 2008 R2 endpoints (RU10 does drop support for pre-Windows 8.1 systems).
- Spin up a test SEPM – use the free 60-day trial license from Broadcom.
- Stage deployment – start with IT department endpoints, then departmental pilots, then full rollout.
- Monitor the SEPM logs for 48 hours post-upgrade, focusing on error code 419 (driver conflict) and 510 (policy push failure).
Default Security Passwords: To prevent unauthorized users or malware from disabling the protection, RU10 now requires a site-level default client password for uninstallation by default.
On-Premises Adaptive Protection: One of the most significant updates is the ability to manage Adaptive Protection entirely through the on-premises Symantec Endpoint Protection Manager (SEPM). Previously cloud-only, this feature uses behavioral analysis and global threat telemetry to identify and block "Living Off the Land" (LOTL) attacks.