Symantec system extension status when Endpoint client is deployed via JAMF

Products

• Endpoint Protection
• Endpoint Security Complete

Issue/Introduction

When the Symantec Endpoint Protection [SEP] Client is deployed through the JAMF in the operating system local Privacy & Security, Symantec system extension for full disk access is shown as disabled. 

However, if verified through the Terminal command it shows as "Jamf Protect Endpoint Security Extension [ activated enabled] 

 

Environment

Symantec Endpoint Protection 14.X on MAC operating system

Cause

Devices managed by MDM policies

Resolution

This is expected behavior as the policies are managed by MDM.
If the local user toggles it ON there then it remains enabled even if MDM policy is withdrawn.