Hi,
It depends upon product version.
Types of enforcement
When the license goes out of compliance the Symantec Endpoint Protection product goes into enforcement mode. There are two types of enforcement
1) Hard Enforcement: SEP 12.1 Small Business Edition
- Content update downloads stop for both server and clients.In Small Business Edition it's 1:1 mapping with CAT server.
- UI changes and log notifications are started.
2) Soft Enforcement: SEP 12.1 Enterprise Edition
- Content update downloads continue from all the sources.
- UI changes and log notifications are started.
Go through article for more details: