You configure a Single Risk event notification in Symantec Endpoint Protection Manager installed in an OS with a Central American time zone. However, the event time in the emailed report after processing the notification is one hour later than it should be.
The time zone is incorrectly identified when saved to the database.
This issue is resolved with 12.1.6 MP4. To upgrade to the latest build of Symantec Endpoint Protection, see: Download the latest version of Symantec Endpoint Protection
However, for the fix to take effect and for notifications to work as expected after the upgrade, you must perform one of the following in Monitors > Notifications > Notification Conditions: