Hi,
Please check the following.
To view the alerts in Symantec Endpoint Protection Manager, follow the steps below:
Open the "Symantec Endpoint Protection Manager console."
Select Monitors
Select the Logs tab
Select Application and Device Control for the log type
Select Application Control for the log context
Select View Logs
Select a Tamper Protection event
Click Start at the top of the page.
From this location, centralized exceptions for Tamper Protection can be set if desired.
Check the logs and let us know so that we can assist you further