Supported protection features

The protection features are included in the Symantec Agent installation package by default. Depending on your subscriptions and the selected operating system, a different set of protection features is supported.
Application Control and Application Isolation require the
Symantec Endpoint Security
Complete subscription.
Active Directory Defense is not a cloud-managed feature.
For Windows Servers, you can additionally configure if you want to install a full set or a server-optimized set of protection features.
Supported protection features
Feature
Windows Workstation
Windows Server
(full)
Windows Server
(basic)
Linux
Mac
Malware Protection
Yes
Yes
Yes
Yes
Yes
Device Control
Yes
Yes
No
No
No
Firewall
Yes
Yes
No
No
Yes
Intrusion Prevention
Yes
Yes
No
No
Yes
Application Control and Application Isolation
Yes
No
No
No
No
Active Directory Defense
Yes
Yes
Yes
No
No
Behavioral Analysis
Yes
Yes
No
No
No
Exploit Protection
Yes
Yes
No
No
No
Microsoft Outlook Auto-Protect
Yes
No
No
No
No
Endpoint Detection and Response
Yes
Yes
Yes
No
Yes