ATP documentation is here:
https://support.symantec.com/en_US/advanced-threat-protection-platform.html
Please go through it for full details.
ATP consists of Endpont, Network, and Email and they all work together to better protect, detect, and respond to threats on the network. It prxies communication between SEPM and SEP clients to provide endpoint detection and response functionality.