You need to stop or start Symantec Endpoint Protection (SEP) Linux daemons as part of a troubleshooting process.

SEP for Linux 

SEP for Linux 14.3 MP1 (14.3.1169.0100) and below

There are three SEP daemons: smcd, rtvscand, symcfgd. To stop/start these daemons, do the following:

NOTE: You will need to have root access through su or sudo in order to start or stop these daemons.

1. Run the following command line (stopping symcfgd will also stop other Symantec daemons):
   

   /etc/init.d/symcfgd stop
   

2. Restart the daemons:
   

   /etc/init.d/symcfgd start
   /etc/init.d/rtvscand start
   /etc/init.d/smcd start

The daemon symcfgd must be started before rtvscand will start.

SEP for Linux 14.3 RU1 (14.3.436.1000) and above

There are four SEP daemons: cafagent, sisamdagent, sisidsagent, sisipsagent. To stop/start these daemons, do the following:

NOTE: You will need to have root access through su or sudo in order to start or stop these daemons.

Run the following script to restart all the daemons:

/usr/lib/symantec/start.sh

If you want to stop all the daemons, run the following script:

/usr/lib/symantec/stop.sh

Note that Linux commands are case sensitive.

Additional information is available in the SEP for Linux Client Guide(s): Symantec Endpoint Protection Documentation