System requirements for
Symantec Endpoint Security

Symantec Endpoint Security
protects a range of device types, from workstations to mobile devices. And if you have a subscription that supports servers, servers are also protected.
If you are upgrading from
Symantec Endpoint Protection
, ensure that all existing devices you want to protect are updated to a supported client. See:
Refer to the following topic for more information:

Device support

Some
Symantec Endpoint Security
features are supported on a subset of device types. For example, Application Isolation and Application Control are not supported on Mac, Windows Servers, Windows Embedded, Linux, or mobile devices. For more information, see:
For more information about the client system requirements, see:

Symantec Agent for Windows system requirements

Symantec Endpoint Security
client for Windows software system requirements
Component
Requirements
Operating system (desktop)
  • Windows 7 (32-bit, 64-bit; RTM and SP1)
  • Windows 8 (32-bit, 64-bit)
  • Windows 8.1 (32-bit, 64-bit), including Windows To Go
  • Windows 8.1 update for April 2014 (32-bit, 64-bit)
  • Windows 8.1 update for August 2014 (32-bit, 64-bit)
  • Windows 10 (version 1507) (32-bit, 64-bit), including Windows 10 Enterprise 2015 LTSB
  • Windows 10 November Update (version 1511) (32-bit, 64-bit)
  • Windows 10 Anniversary Update (version 1607) (32-bit, 64-bit), including Windows 10 Enterprise 2016 LTSB
  • Windows 10 Creators Update (version 1703) (32-bit, 64-bit)
  • Windows 10 Fall Creators Update (version 1709) (32-bit, 64-bit)
  • Windows 10 April 2018 Update (version 1803) (32-bit, 64-bit)
  • Windows 10 October 2018 Update (version 1809) (32-bit, 64-bit), including Windows 10 Enterprise 2019 LTSC.
  • Windows 10 May 2019 Update (version 1903) (32-bit, 64-bit)
  • Windows 10 November 2019 Update (version 1909) (32-bit, 64-bit) (14.2 RU1 and later)
  • Windows 10 20H1 (Windows 10 version 2004) (14.3 and later)
  • Windows 10 20H2 (Windows 10 version 2009) (14.3 and later)
  • Windows 10 21H1 (as of 14.3 RU1)
  • Windows 11 (as of 14.3 RU3)
Operating system (server)
  • Windows Server 2008 R2
  • Windows Small Business Server 2011
  • Windows Server 2012
  • Windows Server 2012 R2
  • Windows Server 2012 R2 update for April 2014
  • Windows Server 2012 R2 update for August 2014
  • Windows Server 2016
  • Windows Server 2019
  • Windows Server, version 1803 (Server Core) (14.2 and later)
  • Windows Server, version 1809 (Server Core)
  • Windows Server, version 1903 (Server Core) (14.2 RU1 and later)
  • Windows Server, version 1909 (Server Core) (14.2 RU1 and later)
  • Windows Server, version 2004
  • Windows Server, version 20H2 (14.3 RU1)
  • Windows Server 2022 (as of 14.3 RU3)
For a list of supported operating systems for previous releases, see:
Browser Intrusion Prevention
Browser Intrusion Prevention support is based on the version of the Client Intrusion Detection System (CIDS) engine. See:
Symantec Endpoint Security
client for Windows hardware system requirements
Component
Requirements
Processor (for physical computers)
  • 32-bit processor: 2 GHz Intel Pentium 4 or equivalent minimum (Intel Pentium 4 or equivalent recommended)
  • 64-bit processor: 2 GHz Pentium 4 with x86-64 support or equivalent minimum
    Itanium processors are not supported.
Processor (for virtual computers)
One virtual socket and one core per socket at 1 GHz minimum (one virtual socket and two cores per socket at 2 GHz recommended)
The hypervisor resource reservation must be enabled.
Physical RAM
1 GB (2 GB recommended) or higher if required by the operating system
Display
800 x 600 or larger
Hard drive
Disk space requirements depend on the type of client you install, which drive you install to, and where the program data file resides. The program data folder is usually on the system drive in the default location C:\ProgramData.
Available disk space is always required on the system drive, regardless of which installation drive you choose.
Space requirements are based on NTFS file systems. Additional space is also required for content updates and logs.
Symantec Endpoint Security
client for Windows available hard drive system requirements when installed to the system drive
Client type
Requirements
Standard
With the program data folder located on the system drive:
  • 395 MB*
With the program data folder located on an alternate drive:
  • System drive: 180 MB
  • Alternate installation drive: 350 MB
Embedded / VDI
With the program data folder located on the system drive:
  • 245 MB*
With the program data folder located on an alternate drive:
  • System drive: 180 MB
  • Alternate installation drive: 200 MB
Dark network
With the program data folder located on the system drive:
  • 545 MB*
With the program data folder located on an alternate drive:
  • System drive: 180 MB
  • Alternate installation drive: 500 MB
* An additional 135 MB is required during installation.
Symantec Endpoint Security
client for Windows available hard drive system requirements when installed to an alternate drive
Client type
Requirements
Standard
With the program data folder located on the system drive:
  • System drive: 380 MB
  • Alternate installation drive: 15 MB*
With the program data folder located on an alternate drive:**
  • System drive: 30 MB
  • Program data drive: 350 MB
  • Alternate installation drive: 150 MB
Embedded / VDI
With the program data folder located on the system drive:
  • System drive: 230 MB
  • Alternate installation drive: 15 MB*
With the program data folder located on an alternate drive:**
  • System drive: 30 MB
  • Program data drive: 200 MB
  • Alternate installation drive: 150 MB
Dark network
With the program data folder located on the system drive:
  • System drive: 530 MB
  • Alternate installation drive: 15 MB*
With the program data folder located on an alternate drive:**
  • System drive: 30 MB
  • Program data drive: 500 MB
  • Alternate installation drive: 150 MB
* An additional 135 MB is required during installation.
** If the program data folder is the same as the alternate installation drive, add 15 MB to the program data drive for your total. However, the installer still needs the full 150 MB to be available on the alternate installation drive during installation.
Symantec Endpoint Security
client for Windows Embedded system requirements
Component
Requirements
Processor
1 GHz Intel Pentium
Physical RAM
256 MB
This figure is for an installation of the
Symantec Endpoint Security
embedded client. If you also implement additional features from an integrated solution such as EDR, additional physical RAM is needed.
Hard drive
The
Symantec Endpoint Security
Embedded / VDI client requires the following available hard disk space:
  • Installed to the system drive: 245 MB
  • Installed to an alternate drive: 230 MB on system drive, and 15 MB on the alternate drive
An additional 135 MB is needed during installation.
These figures assume that the program data folder is on the system drive. For more detailed information, or for the requirements of the other client types, see the
Symantec Endpoint Security
client for Windows system requirements.
Embedded operating system
  • Windows Embedded Standard 7 (32-bit and 64-bit)
  • Windows Embedded POSReady 7 (32-bit and 64-bit)
  • Windows Embedded Enterprise 7 (32-bit and 64-bit)
  • Windows Embedded 8 Standard (32-bit and 64-bit)
  • Windows Embedded 8.1 Industry Pro (32-bit and 64-bit)
  • Windows Embedded 8.1 Industry Enterprise (32-bit and 64-bit)
  • Windows Embedded 8.1 Pro (32-bit and 64-bit)
  • Windows Embedded 10 (as of 14.3 RU3)
  • Windows Embedded 11 (as of 14.3 RU3)
Required minimum components
  • Filter Manager (FltMgr.sys)
  • Performance Data Helper (pdh.dll)
  • Windows Installer Service
Templates
  • Application Compatibility (Default)
  • Digital Signage
  • Industrial Automation
  • IE, Media Player, RDP
  • Set Top Box
  • Thin Client
The Minimum Configuration template is not supported.
The Enhanced Write Filter (EWF) and the Unified Write Filter (UWF) are not supported. The recommended write filter is the File Based Write Filter (FBWF) installed along with the Registry Filter.

Symantec Agent for Mac system requirements

Symantec Endpoint Security
client for Mac system requirements
Component
Requirements
Processor/Chip
64-Bit Intel Core 2 Duo or later
Apple M1 chip (as of 14.3 RU2)
Physical RAM
2 GB of RAM
Hard drive
1 GB of available hard disk space for the installation
Display
800 x 600
Operating system
  • macOS 10.15 to 10.15.7
  • macOS 11 (Big Sur)
  • macOS 12 (Monterey) (as of 14.3 RU3)
For a list of supported operating systems for previous releases, see:

Symantec Agent for Linux system requirements

Symantec Endpoint Security
client for Linux system requirements
Component
Requirements
Hardware
  • Intel Pentium 4 (2 GHz) or later processor
  • 500 MB of free RAM (4 GB of RAM is recommended)
  • 2 GB available disk space if
    /var
    ,
    /opt
    , and
    /tmp
    share the same filesystem or volume
  • 1 GB available disk space in each
    /var
    ,
    /opt
    , and
    /tmp
    if on different volumes
Operating systems
Supported operating systems as of version 14.3 RU1:
  • Amazon Linux 2
  • CentOS 6, 7, 8
  • Debian 9, 10 (14.3 RU2 and later)
  • Oracle Enterprise Linux 6, 7, 8
  • Red Hat Enterprise Linux 6, 7, 8
  • SuSE Linux Enterprise Server 12.x, 15.x
  • Ubuntu 14.04 LTS, 16.04 LTS, 18.04 LTS, 20.04 LTS
For more information, and for lists of supported minor Linux OS versions, see:
Supported operating systems for version 14.3 MP1 and earlier:
  • Amazon Linux
  • CentOS 6U3 - 6U9, 7 - 7U7, 8; 32-bit and 64-bit
  • Debian 6.0.5 Squeeze, Debian 8 Jessie; 32-bit and 64-bit
  • Fedora 16, 17; 32-bit and 64-bit
  • Oracle Linux (OEL) 6U2, 6U4, 6U5, 6U8; 7, 7U1, 7U2, 7U3, 7U4
  • Red Hat Enterprise Linux Server (RHEL) 6U2 - 6U9, 7 - 7U8, 8-8U2
  • SUSE Linux Enterprise Server (SLES) 11 SP1 - 11 SP4, 32-bit and 64-bit; 12, 12 SP1 - 12 SP3, 64-bit
  • SUSE Linux Enterprise Desktop (SLED) 11 SP1 - 11 SP4, 32-bit and 64-bit; 12 SP3, 64-bit
  • Ubuntu 12.04, 14.04, 16.04, 18.04 (as of 14.3); 32-bit and 64-bit
For a list of supported operating system kernels for previous releases, see:
Other environmental requirements (14.3 RU1 and later)
  • OpenSSL 1.0.2k-fips or later
Other environmental requirements (14.3 MP1 and earlier)
  • Glibc
    Any operating system that runs glibc earlier than 2.6 is not supported.
  • net-tools or iproute2
    Symantec Endpoint Security
    uses one of these two tools, depending on what is already installed on the computer.
  • Developer tools
    Auto-compile and the manual compile process for the Auto-Protect kernel module require that you install certain developer tools. These developer tools include gcc and the kernel source and header files. For details on what to install and how to install them for specific Linux versions, see:
  • i686-based dependent packages on 64-bit computers
    Many of the executable files in the Linux client are 32-bit programs. For 64-bit computers, you must install the i686-based dependent packages before you install the Linux client.
    If you have not already installed the i686-based dependent packages, you can install them by command line. This installation requires superuser privileges, which the following commands demonstrate with
    sudo
    :
    • For Red Hat-based distributions:
      sudo yum install glibc.i686 libgcc.i686 libX11.i686 libnsl.i686
    • For Debian-based distributions:
      sudo apt-get install ia32-libs
    • For Ubuntu-based distributions:
      sudo dpkg --add-architecture i386
      sudo apt-get update
      sudo apt-get install gcc-multilib libx11-6:i386
Dependencies
You must install the following list of dependent packages on the computer where you create the installation package.
Core system packages:
  • upstart: An event-driven init system.
  • bash: The GNU Bourne Again shell (bash).
  • sed: A GNU stream text editor.
  • gzip: The GNU data compression program.
  • tar: The GNU file archiving program.
  • gawk: The GNU version of the awk text processing utility.
  • grep: The GNU versions of grep pattern matching utilities.
  • findutils: The GNU versions of find utilities (find and xargs).
  • coreutils: The GNU core utilities - a set of commonly used utility applications.
  • module-init-tools: Kernel module management utilities.
  • util-linux-ng: A collection of basic system utilities.
  • filesystem: The basic directory layout for a Linux system.
  • shadow-utils: Utilities for managing accounts and shadow password files.
  • zip: A file compression and packaging utility compatible with PKZIP.
Dependent libraries:
  • openssl: The OpenSSL toolkit (x86_64).
  • glibc: The GNU libc libraries (x86_64).
  • libstdc++: The GNU Standard C++ Library v4 (x86_64).
  • libgcc: GCC version 4.0 shared support library (x86_64).
  • pam: PAM Authentication Libraries (64bit libpam.so).
  • zlib: A Massively Spiffy Yet Delicately Unobtrusive Compression Library (x86_64).
  • libacl: Utilities to administer Access Control Lists (x86_64).
  • at: Job spooling tools
Graphical desktop environments
You can use the following graphical desktop environments to view the
Symantec Endpoint Security
for Linux client:
  • KDE
  • Gnome
  • Unity
Symantec Agent for Linux 14.3 RU1 does not have a graphical user interface.

Symantec Agent for mobile devices system requirements

The following are the supported operating systems for mobile devices:
  • Android:
    Version 5.0 or later
    Corresponding with min-SDK version 16 (API level 16 or targetSdkVersion 16).
  • iOS/iPadOS:
    Version 9.0 or later
If you're an existing SEP Mobile customer, see:

Secure Connection system requirements

Several Secure Connection features, such as Rogue wireless network protection, Network Integrity, and Smart VPN are available for Windows 10 devices that meet the following requirements.
Supported devices and operating systems for Secure Connection
Support type
What's supported
Device operating systems
  • Windows 10 Redstone 3 version 1709
  • Windows 10 in S mode
Processors
  • Qualcomm Snapdragon ARM
  • Intel
  • AMD

Browser support for cloud console access

You can use the following browsers to access the cloud console:
  • Google Chrome
  • Microsoft Edge
  • Mozilla Firefox
  • Safari
For all browsers, two most recent versions are supported.
Browser support varies by operating system. The minimum resolution supported for Windows browsers is 1400.