Hi Tim,
Thanks for using the Broadcom Community!
It sounds like you installed SEP as a "self-managed" client. This means that its not managed by an On Prem SEPM manager therefore you can actually manage the client locally from machine itself.
If you open the SEP client UI and click on Change Settings on the left, you'll see options to configure your settings.
Next, if you want to add an Exception you'll need to click on "Configure Settings" next to Exceptions, and then click Add.
Next you would add the relevant exceptions that are desired.
For more details about each of the available exceptions see here.
If you need further guidance please open a case with Support.
Thanks,
Russ_V
-------------------------------------------
Original Message:
Sent: Oct 09, 2025 01:43 PM
From: Timothy Canning
Subject: Symantec Endpoint Protection - Application Whitelisting
Hi,
Massive noob here - I apologize, I have been assigned a task to apply a (Client specified) Symantec Endpoint Protection to a laptop that will be off-network for up to 18 months in an industrial application. Client for the machinery being constructed has defined SEP, and wants whitelisting. I have installed SEP and enabled Application Control, but it seems I need to actually have SEP Manager as well, possibly as a co-located install on the laptop?
Is it possible anyone might point me to a knowledgebase article please? Or even provide some guidance on what we are trying to do...? At the end of this project, these devices will be merged into a much larger industrial network where tere is a central SEPM Server, however during the facility build and commissioning that is not available for solid construction reasons sadly.
Any guidance very much appreciated
Tim C
-------------------------------------------