Symantec Endpoint Protection Kext approvals still requiring approval

[jwojda]

I've been working on Symantec kext approvals, but they seem to always require an additional allow in system preferences, am I missing an entry?

[Tribruin]

Are you sure they are KEXTs and not System Extensions? I don't use Symantec Endpoint, but I thought I heard they had migrated from KEXTs to System Extensions already. If so, that is a different payload in the config profile.

[sdagley]

@jwojda You could try a profile with just the Approved Team ID settings and skip the optional Approved Kernel Extensions settings. That's been reliable in my experience with both Mojave and Catalina.