Symantec Endpoint Protection has HIPS in the Network Threat Protection Component.
You can however use it as HIDs by changing the Action for all rules from block to Allow and LOG.
However whenever a new Definition ( IPS Rules ) will get downloaded you will have to change the Action for that rule.
Steps to do this:
Login to SEPM -Policies -Intrution Prevention-
Edit -Intrution Prevention policy ->
Exceptions -> Select All -> Next -> Change Action : Block to Allow Log : Log the Traffic
If you want to disable the Intrution Prevention Alert notification on the client that cab done from
SEPM -Clients- select the Group and Click the policy tab on the right hand side..
Location Specific settings - Server Control -Customise -Uncheck display Intrusion Prevention notification