Symantec Endpoint Protection Arm64 Work !!top!! May 2026

Symantec Endpoint Protection on ARM64: Making It Work in a Non-x86 World

For decades, the cybersecurity industry has been dominated by the x86 and x64 architectures. Most endpoint protection platforms (EPPs), including Symantec Endpoint Protection (SEP), were engineered to run on Intel and AMD processors. However, the computing landscape is shifting dramatically. With the rise of energy-efficient, high-performance ARM64 (also known as AArch64) processors—championed by Apple’s M-series chips, Qualcomm’s Snapdragon X Elite, Amazon’s Graviton, and various IoT devices—security teams now face a critical question: How well does Symantec Endpoint Protection work on ARM64?

, but with specific management limitations and feature gaps. Broadcom support portal ARM64 Support & Performance symantec endpoint protection arm64 work

❓ Still not working?

Consider these alternatives on ARM64:

• Client endpoints: Macs with M1/M2/M3 chips, Windows laptops running Snapdragon.
• Servers: AWS Graviton instances running Ubuntu or RHEL.
• VDI/Cloud: ARM-based virtual desktops.

• File Copy Latency: On a native x64 laptop, SEP scans a folder of 1,000 files in ~2 seconds. On the same Arm64 laptop running emulated SEP, that scan took ~6-8 seconds. The emulation layer adds significant lag to every file system hook.
• Battery Impact: Emulation consumes more power than native code. Running a constant real-time scanner via emulation can shave 10-15% off the vaunted battery life of an Arm laptop.
• Driver Signing: Some advanced SEP features (like Early Launch Anti-Malware or specific NDIS filter drivers for firewall) require kernel-mode drivers. While emulation handles user-mode code, kernel drivers must be native. Broadcom has confirmed that some advanced network protection features are disabled or fall back to a less efficient mode on Arm64.

Management Requirements: ARM64 endpoints cannot be managed by an on-premises Symantec Endpoint Protection Manager (SEPM). They must be managed via the Symantec Endpoint Security (SES) Cloud Console or remain unmanaged. Symantec Endpoint Protection on ARM64: Making It Work