After disabling TLS 1.0 and/or TLS 1.1 in the Symantec Management Communications Profiles in the console, my agents still show Support Protocols as TLS 1.0, TLS 1.1, and TLS 1.2 in the Symantec Manage Agent (SMA) User Interface on the Agent Settings tab > Network Status.
ITMS 8.x
Working as designed. These are the protocols the agent is capable of supporting.
The current TLS version negotiated by the agent may be seen in the Persistent or Non-persistent Connection section (as applicable) of the SMA User Interface