Within the Symantec Endpoint Protection Manager (SEPM) On the Clients tab > Network Information > DNS Servers the entry for DNS Server shows as 127.0.0.1.
Ubuntu 16
We read the value from /etc/resolve.conf and the resolve.conf has entry 127.0.0.1. This is a known issue as seen in:
Once restarted the DNS servers will report correclty in the SEPM.