As of the latest releases (SEP 14.3 RU9 and newer), Broadcom has officially introduced for Windows 11 on ARM. This is not an emulated package; it is a full port of the SEP client to the ARM64 instruction set.
| Vendor | ARM64 Native Client? | Firewall Support? | Maturity | | :--- | :--- | :--- | :--- | | | ✅ Yes (14.3 RU8+) | ✅ Full | High | | Microsoft Defender for Endpoint | ✅ Yes (Built into OS) | ✅ Full (via Defender Firewall) | Highest | | CrowdStrike Falcon | ✅ Yes | ❌ (No firewall, relies on Windows Filtering Platform) | High | | McAfee (Trellix) | ❌ No (Beta only) | ❌ | Low | | SentinelOne | ❌ No (Roadmap 2025) | ❌ | Medium | symantec endpoint protection arm64
If you are running an older SEP version (pre-14.3 RU7), the installer will hard-stop. Slipstream the latest "Full Installation Package" from the Broadcom portal. The ARM64 flag was added in RU7. As of the latest releases (SEP 14
Symantec has optimized the definition sets for ARM64 to ensure that background scans don't drain the battery life that makes ARM devices attractive. Installation Best Practices | Firewall Support
The era of Windows on ARM is no longer a niche experiment; it is a business reality. With the release of , Broadcom has delivered a stable, performant, and native Symantec Endpoint Protection ARM64 client.
If you manage hundreds of ARM64 devices: