Do not need "Download Protection Content"
This refers to Symantec Endpoint Protection 12.1 RU 1.
Our application is Critical Infrastructure Protection. Our customers have a network of Windows computers (XP and 7) that never, ever, ever connect to the Internet - they are 'air gapped'.
We want to use SEP, but only with 'basic' protection: AV only, no other features, because we cannot download and apply updates the way that we can with AV definitions.
The problem is that, in the SEPM Home page, the indication "Endpoint Status" is that all of the client computers are Out-of-date, because they don't have the latest "Download Protection Control" - but they will never have such, because, with no connection to the Internet, they will never get it. The indicator in the upper left corner of the page can be set to 'OK' by deselecting the showing of Download Protection Content, but there is no way to defeat that in the indication in the center of the page.