The Symantec Endpoint Protection Manager (SEPM) uses Apache Tomcat as one of its components. You need to determine the version of Tomcat which is installed with the SEPM.
The Tomcat component built into the SEPM is updated with periodic releases of Symantec Endpoint Protection (SEP). (The SEP 11 branch initially used Tomcat 4.x, and the SEP 12.1 branch uses Tomcat 6.0.29 and above. Information on updates can often be found in the release notes.) It is recommended to always use the latest release of SEP to take advantage of the latest enhancements and improvements.
To confirm the exact release of Tomcat in use.
The version of Tomcat can be found in this JAR file:
<SEPM install folder>\tomcat\lib\catalina.jar
Use a tool capable of unzipping catalina.jar file and look in the file org\apache\catalina\util\ServerInfo.properties. The following line is from the ServerInfo.properties file within a catalina.jar file on a SEPM 12.1 RU6.
server.built=Jan 28 2015 15:51:10 UTC