Organisations have two primary implementation paths to install Symantec security agents on ARM64 systems:

Symantec Endpoint Protection (SEP) provides native support for devices, specifically targeting Windows 11 on Arm . However, this support is strictly limited to cloud-managed (Symantec Endpoint Security/SES) or unmanaged (self-managed) clients. Management and Deployment

Distribute the package using a mobile device management (MDM) utility, custom scripts, or direct download links.

To understand ARM64 support, you must distinguish between the legacy product and the modern product:

Distribute this package via your preferred Mobile Device Management (MDM) tool or Cloud Intune setup. Option B: Sourcing for Unmanaged Environments

While the core anti-malware, machine learning, and heuristic engines work natively on ARM64, several legacy kernel-level and system-hooking components are excluded due to structural differences between x64 and ARM64 instruction sets. Fully Operational Core Features Native Advanced Machine Learning (AML) Intelligent Cloud Analytics Threat Detection File System Real-Time Auto-Protect Network Intrusion Prevention System (IPS) core features Behavioral Analysis (SONAR) Major Exclusions and Unsupported Policies

, but its deployment heavily depends on your specific management infrastructure.

Use the sysinfo command on your ARM64 device and cross-reference the build number with Broadcom’s official "SEP Client Compatibility Matrix" (updated quarterly). Do not assume later builds automatically support ARM64—always check the release notes for the phrase "Windows 11 ARM64."