Choosing which security features to install on the client
Last Updated April 24, 2019
When you deploy the Windows client installation package with the Client Deployment Wizard, you must choose the feature set. The feature set specifies which protection components are installed on the client. You can select a default feature set or customize the feature set. Decide which feature set to install based on the role of the computers, and the level of security or performance that the computers need.
After installation, make sure to keep all protections enabled.
Table: Client installation feature sets (Windows)
Full Protection for Clients
Recommended for workstations, desktop, and laptop computers.
Includes all protection technologies. Appropriate for laptops, workstations, and desktops. Includes the full download protection and mail protocol protection.
Whenever possible, use Full Protection for maximum security.
Full Protection for Servers
Recommended for servers.
Includes all protection technologies except email scanner protection. Appropriate for any servers that require maximum network security, including the Symantec Endpoint Protection Manager server.
Basic Protection for Servers
Recommended for high-throughput servers.
Includes Virus and Spyware Protection and Basic Download Protection. Since intrusion prevention may cause performance issues on high-throughput servers, this option is appropriate for any servers that require maximum network performance.
The Mac client installation package installs Virus and Spyware Protection and intrusion prevention. You cannot customize the features for the Mac client installation package.
The Linux client installation package only installs Virus and Spyware Protection.
Customizing the feature set
If you want to install a subset of the protections, create a custom feature set. However, Symantec recommends that you install all protections.
You cannot customize the features for the Mac or Linux client installation package.
To create a custom client installation feature set