search cancel

What processes and services does Endpoint Security use?


Article ID: 210673


Updated On:


Endpoint Security Endpoint Security Complete


You want to know the processes and services used by Symantec Endpoint Security (SES).


Display Name / Description Service Name Path Binary
Symantec Endpoint Protection
Provides malware and threat protection for Symantec Endpoint Protection.
SepMasterService C:\Program Files\Symantec\Symantec Endpoint Protection\<version>\Bin ccSvcHst.exe
Symantec Endpoint Protection (User Session)
User-context instance. Loads once for each user logged in unless LaunchSmcGui is set to 0 in the registry.
(Not a service)
C:\Program Files\Symantec\Symantec Endpoint Protection\<version>\Bin ccSvcHst.exe
Symantec Endpoint Protection Hardening CAF Service
Communication service.
heCAF C:\Program Files\Symantec\Symantec Endpoint Protection\<version>\SAEP\Common Agent Framework CAFServiceMain.exe
Symantec Endpoint Protection Hardening Detection
Intrusion detection service that monitors system state.
SISIDSService C:\Program Files\Symantec\Symantec Endpoint Protection\<version>\SAEP\IDS\bin SISIDSService.exe
Symantec Endpoint Protection Hardening Prevention
Intrusion prevention service that communicates with the server for policies and events.
SISIPSService C:\Program Files\Symantec\Symantec Endpoint Protection\<version>\SAEP\IPS\bin SISIPSService.exe
Symantec Endpoint Protection Hardening Utility
Controls communications between the Endpoint Protection services.
SISIPSUtil C:\Program Files\Symantec\Symantec Endpoint Protection\<version>\SAEP\IPS\bin sisipsutil.exe
Symantec Endpoint Protection Local Proxy Service
Proxies the web traffic for WSS Traffic Redirection to allow for more granular web traffic management.
SepLpsService C:\Program Files\Symantec\Symantec Endpoint Protection\<version>\Bin ccSvcHst.exe
Symantec Endpoint Protection Scan Service
Provides real-time and on-demand scanning of disks and files.
SepScanService C:\Program Files\Symantec\Symantec Endpoint Protection\<version>\Bin64 ccSvcHst.exe
Symantec Endpoint Protection WSC Service
Allows Symantec Endpoint Protection to report status to the Windows Security Center.
sepWscSvc C:\Program Files\Symantec\Symantec Endpoint Protection\<version>\Bin64 sepWscSvc64.exe
Symantec Network Access Control (Deprecated)
Checks that the computer complies with the defined security policy and communicates with the Symantec Enforcers to allow your computer to access the corporate network.
SNAC C:\Program Files\Symantec\Symantec Endpoint Protection\<version>\Bin64 snac64.exe
Symantec Endpoint Security
Cloud Connect Defense
(Not a service) C:\Program Files\WindowsApps\<app identifier> Security.UWP.exe
Symantec Endpoint Collector
Threat Defense for Active Directory
(Not a service) C:\Program Files\Symantec\Symantec Endpoint Protection\<version>\Bin64 SETDADCollector.exe
Symantec Endpoint Domain Manager
AD Gateway
(Not a service) C:\ProgramData\Symantec\Symantec Endpoint Protection\<version>\Data\Definitions\MiniDMDefs\<defs version> SETDADMiniDM.exe

Note: For 64-bit clients on version 14.3 RU4 and older replace "C:\Program Files\..." with "C:\Program Files (x86)\...".