The licence on symantec endpoint protection when expired is only soft enforcement so will still protect until it is sorted you will get constant notifications.
Below link is further insformation on licence enforcement.
https://www-secure.symantec.com/connect/articles/sep-121-and-license-concept