What processes and services does Endpoint Security use?

Products

• Endpoint Security
• Endpoint Security Complete

Issue/Introduction

You want to know the processes and services used by Symantec Endpoint Security (SES).

Resolution

Display Name / Description	Service Name	Path	Binary
Symantec Endpoint Protection Provides malware and threat protection for Symantec Endpoint Protection.	SepMasterService	C:\Program Files\Symantec\Symantec Endpoint Protection\<version>\Bin	ccSvcHst.exe
Symantec Endpoint Protection (User Session) User-context instance. Loads once for each user logged in unless LaunchSmcGui is set to 0 in the registry.	SmcGui (Not a service)	C:\Program Files\Symantec\Symantec Endpoint Protection\<version>\Bin	ccSvcHst.exe
Symantec Endpoint Protection Hardening CAF Service Communication service.	heCAF	C:\Program Files\Symantec\Symantec Endpoint Protection\<version>\SAEP\Common Agent Framework	CAFServiceMain.exe
Symantec Endpoint Protection Hardening Detection Intrusion detection service that monitors system state.	SISIDSService	C:\Program Files\Symantec\Symantec Endpoint Protection\<version>\SAEP\IDS\bin	SISIDSService.exe
Symantec Endpoint Protection Hardening Prevention Intrusion prevention service that communicates with the server for policies and events.	SISIPSService	C:\Program Files\Symantec\Symantec Endpoint Protection\<version>\SAEP\IPS\bin	SISIPSService.exe
Symantec Endpoint Protection Hardening Utility Controls communications between the Endpoint Protection services.	SISIPSUtil	C:\Program Files\Symantec\Symantec Endpoint Protection\<version>\SAEP\IPS\bin	sisipsutil.exe
Symantec Endpoint Protection Local Proxy Service Proxies the web traffic for WSS Traffic Redirection to allow for more granular web traffic management.	SepLpsService	C:\Program Files\Symantec\Symantec Endpoint Protection\<version>\Bin	ccSvcHst.exe
Symantec Endpoint Protection Scan Service Provides real-time and on-demand scanning of disks and files.	SepScanService	C:\Program Files\Symantec\Symantec Endpoint Protection\<version>\Bin64	ccSvcHst.exe
Symantec Endpoint Protection WSC Service Allows Symantec Endpoint Protection to report status to the Windows Security Center.	sepWscSvc	C:\Program Files\Symantec\Symantec Endpoint Protection\<version>\Bin64	sepWscSvc64.exe
Symantec Network Access Control (Deprecated) Checks that the computer complies with the defined security policy and communicates with the Symantec Enforcers to allow your computer to access the corporate network.	SNAC	C:\Program Files\Symantec\Symantec Endpoint Protection\<version>\Bin64	snac64.exe
-----------------------
Symantec Endpoint Security Cloud Connect Defense	(Not a service)	C:\Program Files\WindowsApps\<app identifier>	Security.UWP.exe
Symantec Endpoint Collector Threat Defense for Active Directory	(Not a service)	C:\Program Files\Symantec\Symantec Endpoint Protection\<version>\Bin64	SETDADCollector.exe
Symantec Endpoint Domain Manager AD Gateway	(Not a service)	C:\ProgramData\Symantec\Symantec Endpoint Protection\<version>\Data\Definitions\MiniDMDefs\<defs version>	SETDADMiniDM.exe

Note: For 64-bit clients on version 14.3 RU4 and older replace "C:\Program Files\..." with "C:\Program Files (x86)\...".