After installing a Dark Network SEP agent and applying an exception policy, files are still being detected.
Symantec Endpoint Protection Dark Network agent type.
Symantec Endpoint Foundation (SEF) content missing.
The SEP agent requires content to function correctly. At minimum, File-Based Protection and Aggregated Protection (SEF) content must be available for the agent to download.
This content can be downloaded from the Virus Definitions & Security Updates page. Ensure the correct version of the .jdb (for SEPM) or .exe (for client directly) you're downloading corresponds to the version of SEP being updated.