Broadcom Symantec Endpoint Security and Management

Name: Broadcom Symantec Endpoint Security and Management
Brand: Broadcom
Rating: 4.4 (2896 reviews)

Leader

Broadcom provides semiconductors and infrastructure software for global organizations’ complex, mission-critical needs

Est 1961|Valuation $1764B

LinkedIn 446K|Website|Web traffic 4.0M|FTEs 33,000|HQ Palo Alto, California, US

MarketsSecurity Service Edge (SSE)Security Information and Event Management (SIEM)Endpoint Security (EPP/EDR)Endpoint Management (UEM)

Broadcom Symantec Endpoint Security and Management screenshot

Published Oct 9, 2026

01Common complaints

1) If the organization already consolidates on Microsoft security suites - Organizations with Microsoft 365 E5 or equivalent licensing that can operationalize Defender for Endpoint may find license consolidation reduces incremental endpoint licensing costs. 2) If modern cloud-first ergonomics and transparent public pricing are required - Competing vendors that publish price anchors and emphasize cloud-native workflows may offer faster procurement and a different operational model. 3) If centralized offboarding/uninstall automation is a strict requirement - Community reports indicate cloud console uninstall orchestration may be limited; mass offboarding may require endpoint scripting and tamper-protection handling. 4) If sensitivity to upgrade and end-of-support timelines is high - Hard end-of-support dates and associated content cutoff events can create operational risk for slower upgrade cycles.

Deal disqualifiers (poor fit)

Need for transparent, self-serve public list pricing and frictionless procurement
Requirement for fully cloud-native lifecycle automation, including centralized mass uninstall without endpoint scripting
Heavy reliance on legacy OS versions where end-of-support timelines create significant upgrade risk

Lifecycle and support constraints

End-of-support and content cutoff events can create definition update gaps for older SEP releases; administrators should plan upgrades proactively to avoid protection lapses.

Linux agent kernel module support changes

Community communications indicate changes to Linux kernel module (KMOD) support that may require agent upgrades by specified dates; administrators should review vendor guidance for specific kernel and agent combinations.

Cloud-managed uninstall limitations (community reported)

Reports indicate the cloud console may not orchestrate uninstall in all scenarios; endpoint-side uninstallation workflows and scripting may be required.

Roadmap visibility

No authoritative public roadmap was identified in the accessible source set for this research summary. Buyers should request product roadmap and feature timelines during procurement.

02Why they buy

Documented differentiators and evidence

Independent lab recognition: AV-TEST awarded Symantec an award labeled 'Best Advanced Protection' for corporate users in the referenced award cycle; this represents an industry lab result and should be considered alongside other lab and operational data.
On-prem management option: availability of on-premises management remains a differentiator for organizations requiring non-cloud control planes.

Areas where competitors have advantages

Public-facing pricing clarity and simplified procurement workflows
Perceived modernity of cloud consoles and ecosystem integrations

03Field reports

Note: Some review platforms restrict full-text access. Where direct quotes are available, they are presented as user-provided excerpts. When a quoted field appears inconsistent (for example, a dislike field that reads like a compliment), that has been noted and treated with caution.

Gartner Peer Insights (access partial)

Gartner Peer Insights review pages require login for full review text; summary comparison pages for Endpoint Protection Platforms are available in market overviews but full review content was not exhaustively accessible during this research.

G2 (Symantec Endpoint Management / Endpoint Security)

Representative user excerpts from publicly visible review snippets include: - Positive feedback noting ease of management and consistent malware protection updates. - Mixed or negative feedback describing instances of false positives and occasional failures for remote command execution from the console. G2 aggregate metrics reported time-to-implement and typical ROI figures on product pages; these aggregates are platform-sourced and should be validated for methodology before use in procurement planning.

TrustRadius

Selected comments on related Symantec products emphasize ease of configuration and small client footprint as pros, alongside upgrade friction and an admin portal described as dated as cons. These themes align with upgrade and console usability concerns identified elsewhere.

Community / Reddit (sysadmin and Symantec subreddits)

Community feedback is polarized. Themes include: - Acknowledgment of baseline security efficacy in some settings. - Frustrations arising from post-acquisition procurement, support experiences, and portal access. - Operational lifecycle concerns (for example, EOS and definition update timelines for legacy SEP versions). - Reports of cloud console uninstall limitations that necessitate endpoint-side scripting for mass offboarding. Administrators sometimes retain SES due to the availability of on-premises management options where organizations require air-gapped or strictly controlled operational environments.

PeerSpot

PeerSpot summarizes mixed support experiences post-acquisition, citing variability in support responsiveness. Aggregated commentary should be treated as secondary synthesis rather than primary review text.

Forrester Total Economic Impact (TEI) — SES Complete

Broadcom hosts a Forrester TEI study that presents a composite model of deployment costs and benefits, including risk-adjusted totals over a multi-year horizon, implementation and training costs, licensing and professional services assumptions, and interviews. Critical evaluation: - Forrester TEI studies are typically commissioned; the composite organization model may not match a specific buyer’s environment, and the results can be sensitive to modeling assumptions (breach probability, consolidation feasibility, and operational savings). Buyers should request the full report, review methodology, and validate assumptions against their environment.

Vendor recognition claims and scorecards

Vendor materials reference alignment with analyst criteria and scorecards. These vendor-provided summaries should be validated against the original analyst documents to confirm scope and interpretation of criteria.

04Best fit

Company sizes

Mid-market to enterprise organizations (broadly mid-sized to very large), although operational fit is more dependent on control-plane requirements and environment constraints than pure headcount.

Industries / verticals

Government and public sector, defense-adjacent organizations, healthcare, manufacturing, and other regulated industries where on-premises management, strict change control, or segmented networks are required.

Roles / personas

Security leaders (CISO), SecOps managers, endpoint security engineers, EUC/desktop engineering teams, systems administrators responsible for agent lifecycle and management.

Pain points addressed

Centralized endpoint security policy management and consolidation of malware prevention, firewall/device control, and optional EDR capabilities.

Qualification criteria (good fit)

Requirement for on-premises console options or air-gapped operations
Existing Symantec footprint where migration risk should be minimized
Access to a partner/support model with contractual SLAs and escalation commitments

05The pitch

What the product does (objective core value proposition)

Broadcom’s Symantec Endpoint Security and Management portfolio is an endpoint security stack centered on: - Endpoint protection (EPP/NGAV): signature and behavior-based prevention, firewall/IPS controls. - Endpoint detection and response (EDR) (available in higher tiers): investigation, hunting, and response capabilities. - Centralized management: options typically include on-premises management (historically via SEPM) and cloud/hybrid management (SES cloud console), plus related endpoint management tooling. Broadcom describes Symantec Endpoint Security (SES) as a consolidated endpoint security platform intended to cover prevention, detection, and response with centralized policy management. Vendor positioning is noted as vendor-provided messaging and should be validated via independent testing and user feedback.

Target market and positioning

Historically established presence in mid-market to large enterprise environments that value:
- On-premises management (air-gapped or cloud-averse industries)
- Existing Symantec operational familiarity
Likely less well suited for small and medium-sized businesses that prioritize modern user experience, transparent list pricing, or a fully cloud-native operational model (based on community reports and pricing observations).

Get a comprehensive analysis of Broadcom Symantec Endpoint Security and Management including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →

Published Oct 9, 2026

01Common complaints

If the organization already consolidates on Microsoft security suites

Organizations with Microsoft 365 E5 or equivalent licensing that can operationalize Defender for Endpoint may find license consolidation reduces incremental endpoint licensing costs.

If modern cloud-first ergonomics and transparent public pricing are required

Competing vendors that publish price anchors and emphasize cloud-native workflows may offer faster procurement and a different operational model.

If centralized offboarding/uninstall automation is a strict requirement

Community reports indicate cloud console uninstall orchestration may be limited; mass offboarding may require endpoint scripting and tamper-protection handling.

If sensitivity to upgrade and end-of-support timelines is high

Hard end-of-support dates and associated content cutoff events can create operational risk for slower upgrade cycles.

Deal disqualifiers (poor fit)

Need for transparent, self-serve public list pricing and frictionless procurement
Requirement for fully cloud-native lifecycle automation, including centralized mass uninstall without endpoint scripting
Heavy reliance on legacy OS versions where end-of-support timelines create significant upgrade risk

Lifecycle and support constraints

End-of-support and content cutoff events can create definition update gaps for older SEP releases; administrators should plan upgrades proactively to avoid protection lapses.

Linux agent kernel module support changes

Community communications indicate changes to Linux kernel module (KMOD) support that may require agent upgrades by specified dates; administrators should review vendor guidance for specific kernel and agent combinations.

Cloud-managed uninstall limitations (community reported)

Reports indicate the cloud console may not orchestrate uninstall in all scenarios; endpoint-side uninstallation workflows and scripting may be required.

Roadmap visibility

No authoritative public roadmap was identified in the accessible source set for this research summary. Buyers should request product roadmap and feature timelines during procurement.

02Why they buy

Documented differentiators and evidence

Independent lab recognition: AV-TEST awarded Symantec an award labeled 'Best Advanced Protection' for corporate users in the referenced award cycle; this represents an industry lab result and should be considered alongside other lab and operational data.
On-prem management option: availability of on-premises management remains a differentiator for organizations requiring non-cloud control planes.

Areas where competitors have advantages

Public-facing pricing clarity and simplified procurement workflows
Perceived modernity of cloud consoles and ecosystem integrations

03Field reports

Gartner Peer Insights (access partial)

G2 (Symantec Endpoint Management / Endpoint Security)

Representative user excerpts from publicly visible review snippets include:

Positive feedback noting ease of management and consistent malware protection updates.
Mixed or negative feedback describing instances of false positives and occasional failures for remote command execution from the console.

G2 aggregate metrics reported time-to-implement and typical ROI figures on product pages; these aggregates are platform-sourced and should be validated for methodology before use in procurement planning.

TrustRadius

Community / Reddit (sysadmin and Symantec subreddits)

Community feedback is polarized. Themes include:

Acknowledgment of baseline security efficacy in some settings.
Frustrations arising from post-acquisition procurement, support experiences, and portal access.
Operational lifecycle concerns (for example, EOS and definition update timelines for legacy SEP versions).
Reports of cloud console uninstall limitations that necessitate endpoint-side scripting for mass offboarding.

Administrators sometimes retain SES due to the availability of on-premises management options where organizations require air-gapped or strictly controlled operational environments.

PeerSpot

Forrester Total Economic Impact (TEI) — SES Complete

Critical evaluation:

Forrester TEI studies are typically commissioned; the composite organization model may not match a specific buyer’s environment, and the results can be sensitive to modeling assumptions (breach probability, consolidation feasibility, and operational savings). Buyers should request the full report, review methodology, and validate assumptions against their environment.

Vendor recognition claims and scorecards

04Best fit

Company sizes

Mid-market to enterprise organizations (broadly mid-sized to very large), although operational fit is more dependent on control-plane requirements and environment constraints than pure headcount.

Industries / verticals

Government and public sector, defense-adjacent organizations, healthcare, manufacturing, and other regulated industries where on-premises management, strict change control, or segmented networks are required.

Roles / personas

Security leaders (CISO), SecOps managers, endpoint security engineers, EUC/desktop engineering teams, systems administrators responsible for agent lifecycle and management.

Pain points addressed

Centralized endpoint security policy management and consolidation of malware prevention, firewall/device control, and optional EDR capabilities.

Qualification criteria (good fit)

Requirement for on-premises console options or air-gapped operations
Existing Symantec footprint where migration risk should be minimized
Access to a partner/support model with contractual SLAs and escalation commitments

05The pitch

What the product does (objective core value proposition)

Broadcom’s Symantec Endpoint Security and Management portfolio is an endpoint security stack centered on:

Endpoint protection (EPP/NGAV): signature and behavior-based prevention, firewall/IPS controls.
Endpoint detection and response (EDR) (available in higher tiers): investigation, hunting, and response capabilities.
Centralized management: options typically include on-premises management (historically via SEPM) and cloud/hybrid management (SES cloud console), plus related endpoint management tooling.

Broadcom describes Symantec Endpoint Security (SES) as a consolidated endpoint security platform intended to cover prevention, detection, and response with centralized policy management. Vendor positioning is noted as vendor-provided messaging and should be validated via independent testing and user feedback.

Target market and positioning

Historically established presence in mid-market to large enterprise environments that value:
- On-premises management (air-gapped or cloud-averse industries)
- Existing Symantec operational familiarity
Likely less well suited for small and medium-sized businesses that prioritize modern user experience, transparent list pricing, or a fully cloud-native operational model (based on community reports and pricing observations).

Get a comprehensive analysis of Broadcom Symantec Endpoint Security and Management including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →