These have been avaiable in the first SEP 14 and they are the secuirty patches that are pushed out via liveupdate to the clients rather than having to upgrade the clients everytime there is a RU or MP release. Gives symantec the ability to patch vulnerabilities on the client as they know it takes some companies some time to upgrade evertime they release a new package.
Symantec Endpoint Protection Manager downloads additional types of content from LiveUpdate servers:
-
Client security patches
-
Endpoint Detection and Response: Definitions that the Endpoint Detection and Response (EDR) component uses to detect and investigate suspicious activities and issues on hosts and endpoints.
-
Common Network Transport Library and Configuration: Definitions that the entire product uses to achieve network transportation and telemetry.
See About the types of content that LiveUpdate downloads.
https://support.symantec.com/en_US/article.HOWTO125362.html