If you have seen the recent news of a Google Engineer reverse engineering Symantec’s Antivirus Kernel Decompresser 

http://www.itnews.com.au/news/symantec-scrambles-to-patch-severe-holes-in-26-products-429907

You will need to update all your Machines Symantec Endpoints to 12.1.7004.6500 ( Update to SEP 12.1 RU6 MP5 ) per Symantec recommendation here

https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_00

More details of the patch

https://support.symantec.com/en_US/article.INFO3801.html

To do this on SEPM

*** Important Check for curent Autorestart settings***

• Login to SEPM
• Go to the Clients page
• Select the group your server is in
• Select the Policies tab at the top
• Under Settings select General Settings
• On the Restart Settings tab

First go here : https://symantec.flexnetoperations.com/control/symc/registeranonymouslicensetoken

And enter the license key for your Symantec Endpoint Product ( will start with M! ) can be be found by logging into your Symantec Account

After Download Symantec_Endpoint_Protection_12.1.6_MP5_SEPM_EN.exe

Run the installer on SEPM server ( may need a reboot before and backup of DB ) 

After installing you will have new packages available 

Run through this : http://www.symantec.com/connect/articles/upgrade-clients-sep-121-auto-upgrade-feature