MacOS and OSX compatibility for Endpoint Protection
Article ID: 152316
Updated On:
Products
Endpoint Protection
Endpoint Security
Endpoint Security Complete
Issue/Introduction
Compatibility information between the Symantec Endpoint Protection (SEP) and Symantec Endpoint Security (SES) Mac client and macOS / OS X.
Resolution
SEP 16.0 agent macOS compatibility Chart
| Sequoia | Tahoe |
| macOS 15.x | macOS 26.x |
| SEP 16.0 | |
Upgrading or Migrating from 14.x
| Migrating from version below to SEP 16.0 | Supported |
|
14.3 RU9 and 14.3 RU8 |
Yes. |
| 14.3 RU7, RU5, RU3 | No*. |
| 14.3 RU2 and older | No. |
*Not a supported migration path but is not blocked.
Additional notes - SEP 16.0
- Only supports macOS installed on Apple Silicon (ARM).
- Intel based macOS install is not blocked, but not supported.
- macOS 13 and older: Install is blocked.
- macOS 14: Not supported but agent install is not blocked.
SEP 14.x Client for macOS/OS X Compatibility Chart
| Catalina | Big Sur |
Monterey |
Ventura |
Sonoma | Sequoia | Tahoe |
|
macOS 10.15 – 10.15.7 |
macOS 11.x |
macOS 12.x |
macOS 13.x | macOS 14.x | macOS 15.x | macOS 26.x |
|
14.3 RU5 |
|
|
|
|||
|
|
14.3 RU6 |
|
|
|
||
|
|
14.3 RU8 |
|
||||
|
|
|
14.3 RU9 | ||||
Note: Different product versions have specific system requirements.
- The SEP client for Mac is managed by a Symantec Endpoint Protection Manager (SEPM) on a Windows server.
- The Symantec Agent for Mac is cloud-based and managed by the Symantec Endpoint Security (SES) web page.
- The Symantec Agent for Mac client is only supported on macOS 10.15.x and 11.x with the Symantec Agent for Mac build 14.3 RU1 and newer.
Symantec Agent for Mac version (SEPM)
| Release Name | Version (Build Number) |
| 14.3 RU9 | 14.3.11240.9000 |
| 14.3 RU8 | 14.3.10131.8000 |
| 14.3 RU6 | 14.3.9211.6000 |
| 14.3 RU5 | 14.3.8264.5000 |
| 14.3 RU3 | 14.3.5056.3000 |
| 14.3 RU2 | 14.3.4625.2000 |
| 14.3 RU1 MP1 (Mac Hotfix) | 14.3.3589.1100 |
| 14.3 RU1 MP1 | 14.3.3580.1100 |
| 14.3 RU1 (Hotfix) | 14.3.3390.1000 |
| 14.3 RU1 | 14.3.3385.1000 |
Mac versions prior to 14.3 RU1 follow the same versioning as Windows clients
Additional Notes
- MacOS 14.x Sonoma is currently supported on 14.3 RU8, with the following linked limitation around Web Security Services. Web and Cloud Access Protection policies must remain disabled with this macOS and Endpoint Mac client combination.
- There is no 14.3 RU7 Mac client. The 14.3 RU7 Full installer download ships with the 14.3 RU6 Mac client.
- MacOS 13 Ventura is currently supported on 14.3 RU5 and 14.3 RU6.
- The 14.3 RU5 Full installer download ships with the 14.3 RU3 Mac client. The 14.3 RU5 Mac client will download to the SEPM when Liveupdate is run on the SEPM server.
- There is no 14.3 RU4 Mac client. The 14.3 RU4 Full installer download ships with the 14.3 RU3 Mac client.
- Apple M1 (All variants) supported from SEP 14.3 RU2 and later.
- Apple M2 (All variants) supported from SEP 14.3 RU5 and later.
- Apple M3 (All variants) supported from SEP 14.3 RU8 and later.
- Apple M4 (All variants) supported from SEP 14.3 RU9 and later.
- Apple M5 (All variants) supported from SEP 14.3 RU9 and later.
- Neither Apple or Symantec support macOS 10.12.x or older
- Mac OS X 64-bit mode is supported.
- Remove legacy Symantec AntiVirus (SAV) for Mac installations before installing Symantec Endpoint Protection.
See Remove Symantec software for Mac using RemoveSymantecMacFiles. - As of macOS 10.13, you must authorize the Symantec Endpoint Protection kernel extension after installation for Symantec Endpoint Protection to fully function. You are prompted during the client installation to do it if needed.
- If you do not do it during the client installation, go to System Preferences > Security & Privacy, and click Allow. Neither Symantec Endpoint Protection nor the Mac operating system continue to remind you that you must do this.
You only need to authorize the kernel extension once during the life of the computer's operating system. If you uninstall and reinstall the client, you don't need to reauthorize the kernel extension. If you have Symantec Endpoint Protection 14 and then upgrade to macOS 10.13, you don't need to reauthorize the kernel extension. However, if you reinstall the operating system, you need to reauthorize the kernel extension.
See About authorizing kernel extensions for Symantec Endpoint Protection for macOS 10.15.
- If you do not do it during the client installation, go to System Preferences > Security & Privacy, and click Allow. Neither Symantec Endpoint Protection nor the Mac operating system continue to remind you that you must do this.
- Kext notarization was added in macOS 10.14.5. If you install a client version earlier than 14.2 RU1 (refresh) on macOS 10.14.5, or upgrade the operating system to macOS 10.14.5 with an earlier version of SEP already installed and experience any issues, please contact Support for assistance.
Web and Cloud Access Protection
- SEP 14.3 RU6 introduced macOS management of Web and Cloud Access Protection via the SES cloud.
- SEP 14.3 RU5 provided tunneling functionality with Web and Cloud Access Protection, including seamless identification with Cloud SWG (formerly known as WSS).
Additional Information
Feedback
Yes
No
Powered by
