This is probably Symantec's best kept secret - protection for SharePoint services.

It works with the SQL server/databases and the SP servers themselves.

It scans content coming and going through SharePoint and the SQL database.

No, SEP can't do that - a document pushed through SharePoint into SQL doesn't touch the OS file system, which is what SEP protects.  SEP protects the OS, and the OS's file structure, like NTFS and so on, and the files stored on/in the OS file structure. Since SharePoint is sort of (at least in my mind) like a tunnell through the OS to SQL, it doesn't land on the OS drive for SEP to see it. It isn't executed, or saved as a file in the operating system file structure as we know it.

SO, Symantec has a product using their scan engine that DOES look at things coming and going THROUGH SharePoint.

It integrates into the SharePoint administration (at least it's supposed to, I am still dealing with some sort of anomaly that caused it to not integrate on a couple of our SP servers, but that's an exception!)

You can manage what gets scanned and when through SharePoint administration, and the finer details of the scan engine itself via another interface. There are installations for SP farms, or for a stand-alone installation. It is typically installed on the SPS themselves, and the SQL server(s), and you can even reduce the load on the SPS servers by installing the scan engine on a non-SharePoint server and telling it through configuration to use that scan engine either as a primary, secondary, or load sharing sort of situation, whatever.  So if your SharePoint server is already loaded to the hilt-  no worries, tell it to push things through the scan engine on a different server. You can set up safeties - if a server is behind the others on defs, what to do, if the scan engines are down, what to do - do you want things scanned later when things are repaired, or do you have a lot of trust and allow users to download or upload anyway, even with a down scan engine, you choose based on need, server load, type of users and use SPS gets and so on.

Great product, but not a lot of good solid knowledge about it out there. (meaning it's not heavily promoted for some reason, and few customers have even heard of it. Years ago, even few Symantec employees knew about it! That has changed, thankfully!)

I give it a thumbs up.