Seamlessly integrates essential technologies such as antivirus, antispyware, firewall, intrusion prevention, device control.
Requires only a single agent that is managed by a single management console.
Provides unmatched endpoint protection from the market leader in endpoint security.
Enables instant NAC upgrade without additional software deployment for each endpoint.
New Features:

Single Agent and Single Console
Delivers a single agent for all Symantec Endpoint Protection technologies and Symantec Network Access Control. Delivers a single integrated interface for managing all Symantec Endpoint Protection technologies and Symantec Network Access Control. All allow for a single communication method and content delivery system across all technologies.
* Provides operational efficiencies such as single software updates, single policy updates.
* Provides unified and central reporting.
* Provides unified licensing and maintenance.
* Requires no change to the client when adding Symantec Network Access Control enforcement.
* Lowers Total Cost of Ownership for endpoint security.
* Reduces administrative effort.
Proactive Threat Scanning
Behavioral-based protection that protects against zero-day threats and threats not seen before. Unlike other heuristic-based technologies, Proactive Threat Scan scores both the good and bad behavior of unknown applications, providing a more accurate malware detection.
* Accurately detects malware without the need to set up rule-based configurations.
* Helps lower the number of false positives.
Advanced Rootkit Detection and Removal
Provides superior rootkit detection and removal by integrating VxMS (Veritas Mapping Service—a Veritas technology), thereby providing access below the operating system to allow thorough analysis and repair.
* Detects and removes the most difficult rootkits.
* Saves time and money and productivity lossses associated with re-imaging infected machines.
Application Control
Allows administrators to control access to specific processes, files, and folders by users and other applications. It provides application analysis, process control, file and registry access control, and module and DLL control. It enables administrators to restrict certain activities deemed as suspicious or high risk.
* Prevents malware from spreading or harming endpoints.
* Locks down endpoints to prevent data leakage.
Device Control
Controls which peripherals can be connected to a machine and how the peripherals are used. It locks down an endpoints to prevent connections from thumb drives, CD burners, printers, and other USB devices.
* Prevents sensitive and confidential data from being extracted or stolen from endpoints (data leakage).
* Prevents endpoints from being infected by viruses spread from peripheral devices.
Operating System:

32-bit:

Windows 2000 Server/Advanced Server/Datacenter Server/Small Business Server with Service Pack 3 or later
Windows XP Professional with Service Pack 1 or later
Note: Windows XP supports a limited number of concurrent users if the clients are in "push" mode. Use "pull" mode on Windows XP servers for up to 100 clients. For more information, search for Symantec Endpoint Protection Manager 11.x communication troubleshooting on the Symantec Support Web Site.
Windows Server 2003 Standard Edition/Enterprise Edition/Datacenter Edition/Storage Edition/Web Edition/ Small Business Server

64-bit:

Windows XP Professional x64 Edition with Service Pack 1 or later
Windows Server 2003 Standard x64 Edition / Enterprise x64 Edition / Datacenter x64 Edition with Service Pack 1 or later
Windows Compute Cluster Server 2003
Windows Storage Server 2003
Note: If you use Microsoft Clustering services for the Symantec Endpoint Protection Manager server you must install the Symantec Endpoint Protection Manager on the local volume.