We have recently been experiencing issues with Symantec Endpoint Protection which we have deployed to all our JAMF managed devices. We believe that the root cause is due to some misconfigured Config Profiles which were not pre-approving some system extensions.
We have identified a fix for this, but during our investigations we've discovered that several devices have multiple versions of the SEP system extension installed.
I recall coming across a Broadcom/Symantec tech article recommending that you uninstall older versions before upgrading as it will properly remove the old extensions. However we only came across this after we had upgraded.
Is anyone aware of any issues that may arise from having a system extension running on a device with no associated application? The old extension we see on some systems is associated with a version of SEP that will not run on Catalina or Big Sur, so our only way to remove it is to disable SIP, which is not an option for the majority of our devices as they are remote. Can we expect problems if we leave the old extension on the devices? Or should we make sure it's been removed?
Does anyone have experience with a similar situation?
Conor
