Hello,
I agree with above.
Check this Article:
Best Practices for Symantec Endpoint Protection on Citrix and Terminal Servers
http://www.symantec.com/docs/TECH91070
Secondly, Exclude Citrix from attaching to the Symantec Endpoint Protection processes by following the instructions in the following Citrix document. Please ensure you backup the registry before making any changes:
http://support.citrix.com/article/CTX107825
It is recommended, on 64-bit machines, to add the exclusions to the 32-bit and 64-bit registry hives outlined in the document. Exclude the following files, others may be needed as well if you're seeing crashing of other applications or modules:
ccsvchst.exe, smc.exe, sesclu.exe, smcgui.exe
Again, In reference to VDI - check these -
SEP 12.1.2 Best Practices on Citrix Virtual Desktops ( Provisioning Services) -Part 1
https://www-secure.symantec.com/connect/articles/sep-1212-best-practices-citrix-virtual-desktops-provisioning-services-part-1
SEP 12.1.2 Best Practices on Citrix Virtual Desktops ( Provisioning Services) -Part 2
https://www-secure.symantec.com/connect/articles/sep-1212-best-practices-citrix-virtual-desktops-provisioning-services-part-2
Hope that helps!!