¹ Symantec EDR supports endpoint searches on endpoints running SEP 14.0 and above. However, only endpoints that run SEP 14.0 RU1 and later can take advantage of endpoint searches using ECC 2.0 functionality. Prior versions use ECC 1.0 functionality. See About Endpoint Communications Channel (ECC).
Table: Supported SEP 12.x versions by feature
Supported SEP 12.x versions
Symantec EDR supports endpoint searches for the clients that use SEP12.1 RU5 and later. Symantec EDR manages the clients that use SEP 12.1 RU 6 MP3 or later with full ECC 1.0 functionality. However, for the clients that use a version between SEP 12.1 RU5 and 12.1 RU6 MP 3, some functionality may be limited depending upon the version of the client.
Endpoint activity recorder search
Symantec EDR database search
12.1 RU5 and later
Event forwarding to Symantec EDR (near live response)