Symantec Endpoint Protection Kext approvals still requiring approval

Are you sure they are KEXTs and not System Extensions? I don't use Symantec Endpoint, but I thought I heard they had migrated from KEXTs to System Extensions already. If so, that is a different payload in the config profile.

@jwojda You could try a profile with just the Approved Team ID settings and skip the optional Approved Kernel Extensions settings. That's been reliable in my experience with both Mojave and Catalina.