From SEP 14.3 RU6 macOS can use Web and Cloud Access Protection. You may be migrating Mac clients to the cloud Integrated Cyber Defence Manager (iCDM) of Symantec Endpoint Security) and find you can apply cloud policies to a Mac client that is using the older standalone Web Security Service (WSS). However, the policies are not honored because the standalone WSS must be removed from macOS and the system rebooted as part of the migration.
SES
iCDM
SEP 14.3 RU6
Web and Cloud Access
Mac
iCDM has no way of knowing that a macOS has uninstalled older unrelated software.
A reboot is required after removing WSS from a Mac client.
The process for migrating to iCDM from WSS standalone is:
1. Uninstall the standalone WSS agent.
2. Migrate to iCDM and Enable a policy on the SEP agent of the Mac.
3. Trigger a reboot on the endpoint.