Deployment of Symantec Mobile Device Security (MDS) on an AirWatch managed device begins with obtaining the AirWatch Enterprise Mobile Manager (EMM) Identifier from the Symantec management console, which gets entered in the VPN profile section of AirWatch EMM management console.
Follow steps outlined in the documentation: Distribute SEP-Mobile through an MDM
Please refer to Required Locations, Ports, and Protocols for ports required to be open for this Access Method.