These tools run independently but can forward logs to your SIEM or SEP Manager via syslog.

Many organizations pair SEP with dedicated FIM tools such as:

While SEP can perform FIM, it is important to understand that it is not its primary design goal. Here is how it compares to dedicated FIM tools:

Standard Symantec Endpoint Protection is designed to block threats and manage endpoint health. It uses to block suspicious actions by files, but this is different from a dedicated FIM solution that audits every change (who, what, and when) to a specific file.