Symantec Endpoint Protection (SEP) 14.2 RU2 introduces a new mode called Audit Mode available to cloud-enrolled SEP Managers. Pre-14.2 RU2 SEP Managers and clients are unable to use this setting, when configured in the Integrated Cyber Defense Manager console.
Pre-14.2 RU2 SEP Managers and clients will need to be upgraded to 14.2 RU2, or newer, to take advantage of this feature. Refer to Upgrade best practices for Endpoint Protection 14.x for upgrade recommendations.