This version integrated new Mac and Linux agents that can be managed directly from the on-premises console or the cloud-based Symantec Endpoint Security console.
This release added the ability to run both Windows Defender and Symantec Endpoint Protection on the same machine, useful for transition periods or layered defense strategies.
Administrators can now force the system to "learn" an application based specifically on its hash value to reduce false positives in strict environments. Administration Best Practices
You can now designate a primary management server for external logging to a syslog server, with automatic failover to a second server if the primary goes offline.
Oracle Java SE was replaced with OpenJDK to manage licensing and security updates more effectively. Enhanced Protection Capabilities