The issue occurs with SEP disabled (it was disabled to increase throughput of known good files)
the installation includes:
Antivirus and Antispyware
Network Threat Protection
and Application and Device Control.
it does not include:
Antivirus Email Protection
TruScan Protection.
Also: I believe our Support Contract with Symantec is current.