You enroll Symantec Endpoint Protection Manager (SEPM) 14.0.1 with the cloud portal. When you manually stop the Symantec Endpoint Protection Bridge Service, you expect the service to stay stopped until you restart the computer. This behavior is consistent with other Windows services that you manually stop. Instead, the Bridge Service restarts after five minutes.

This behavior is expected.

When Symantec Endpoint Protection Manager enrolls with the cloud portal, it requires the Bridge Service for cloud communication. Therefore, Symantec Endpoint Protection Manager restarts the service if you manually stop it. To disable the Bridge Service for longer than five minutes, set the service to Disabled and then restart the Symantec Endpoint Protection Manager server. However, you should not leave this service disabled for an extended period if you keep Symantec Endpoint Protection Manager enrolled with the cloud portal.