The Symantec Endpoint Protection Cloud (SEPC) client does not always display a red X for disabled policy settings.
This red X is usually displayed by the SEPC system tray icon on Windows clients or via the SEPC QuickMenu in the menu bar of Mac clients, and indicates the product needs attention because it is "Disabled", "At Risk", etc.
But the red X is sometimes not displayed -- for example, if a user has local control over Auto-Protect and disables it, then the red X appears. But the red X does not appear if Auto-Protect has been disabled via policy settings in SEPC web portal management (https://sepc.securitycloud.symantec.com).
Mac or Windows clients
In SEPC web portal management Security Policy there are various on/off settings, some with an accompanying checkbox (e.g. "Let user temporarily disable file scanning/ firewall/ etc").
To sum up the behavior of these choices: in almost all combinations of Security Policy settings and checkboxes in web portal managment, the only time the SEPC tray icon red X will appear for a client is if the user has local control over that setting and has disabled it themselves.
This has been fixed in the product as of November 20, 2017. The SEPC system tray icon (or Mac QuickMenu choice) should now display the red X more consistently to indicated that the product needs attention because it is "Disabled", "At Risk", etc.
Subscribing will provide email updates when this Article is updated. Login is required.