Endpoint Protection clients are automatically upgrading to the latest Cloud provisioned client version despite the 'Allow Client Upgrade' setting being disabled in the System Policy.
Endpoint Protection 15 Cloud Console
Endpoint Protection 14.2 clients provisioned by the Integrated Cyber Defense Manager
The clients do have the same System Policy revision number as the policy checked in the Cloud Console.
This issue is fixed in Symantec Endpoint Protection 14.2 RU2. For information on how to obtain the latest build of Symantec Endpoint Protection, see Download the latest version of Symantec software here.