Symantec Endpoint Protection (SEP) for Mac client displays "At Risk" when Intrusion Prevention Policy is withdrawn or disabled at the SEPM (Symantec Endpoint Protection Manager).
A "Fix Now" button is displayed in client but "At Risk" status remains after clicking it or running LiveUpdate.
Customize->Activity->Definition Status will display up-to-date Virus and Spyware Protection and LiveUpdate status but Intrusion Prevention definitions status will be "Not available"
This is a result of the IPS policy being withdrawn or disabled. Normally, SEP should not display any error for features that are deliberately disabled and locked by an administrator. This issue has been resolved the issue in SEP 14.3 RU2 for Mac (14.3.4625).
Release: 14.3 RU1
SEP for Mac