In Symantec Protection Engine (SPE), a pdf file with 256_bit encryption that is not password protected will trigger a password protected verdict.
This behavior is due to a defect in the Decomposer PDF Engine.
Release : SPE 8.0.1 and below
Component : Decomposer PDF Engine
Issue fixed in newer release. Please upgrade to SPE 8.1 or later.