When the license goes out of compliance the Symantec Endpoint Protection product goes into enforcement mode. There are two types of enforcement
1) Hard Enforcement: SEP 12.1 Small Business Edition
- Content update downloads stop for both server and clients.In Small Business Edition it's 1:1 mapping with CAT server.
- UI changes and log notifications are started.
2) Soft Enforcement: SEP 12.1 Enterprise Edition
- Content update downloads continue from all the sources.
- UI changes and log notifications are started.
...if you are on the EE Edition it will still receive the updates.
https://www-secure.symantec.com/connect/articles/sep-121-and-license-concept