Upon System reboot Symantec Endpoint Protection will generate following entry into system logs ."User is attempting to terminate Symantec Management Client"
During manual service restart like smc -stop & smc -start system logs will generate following entry into system logs:Symantec Management Client is stopped.Symantec Management client has been started.
This is by design.