You want to know if single .exe patches are available to update Symantec Endpoint Protection (SEP) clients.

For example, you may need a single .exe patch for clients in the following situations:

• Patch deployment that you do not manage through the Symantec Endpoint Protection Manager (SEPM)
• To update unmanaged clients
• Testing in a lab environment before a full deployment to a production environment, to comply with change control policies

Individual Symantec Endpoint Protection client patches can be downloaded from the following page:

Downloads for Symantec Endpoint Protection

Select the desired product version from the drop-down menu, and then look for the link that provides the client-only patch files.

Important Notes:

• These patches are Symantec Endpoint Protection client only and are version and platform specific. Be sure to verify the Symantec Endpoint Protection client initial version and patch level as well as the bit depth (32-bit or 64-bit), and then download the appropriate patch. You should also use a package that matches the package language (English or localized) that you use.
• There are no patches to update Symantec Endpoint Protection Manager to a later version. Only the full installation download upgrades Symantec Endpoint Protection Manager.
• You cannot deploy these files from Symantec Endpoint Protection Manager. Instead, use the AutoUpgrade functionality by assigning the updated installation package to a client group.
• These patches are in-place upgrades and maintain existing features and policies. You cannot merge or apply new policies or applied along with these updates.