Can Symantec Endpoint Protection V 12.1.4100 still get AV signatures /updates?

From 'wmic product list' output, can see that the version
is   12.1.4100.4126  

Q1:
Our SEP Manager is also this version; can the clients
still continue to get the AV signatures?  
The link below says it's not supported with SEP Manager 14.x:
https://knowledge.broadcom.com/external/article/164751/end-of-support-life-for-endpoint-protect.html

Q2:
The concern is the SCADA stations are still on Win XP so if
we were to upgrade to SEP 14.x,  SEP 14.x can't run on Win
XP or can it??                     I was searching
for SEP 13.x (hopefully it's not an eol version & could
support Win XP) but can't locate any SEP 13.x


Q3:
Does SEP 14.x & SEP 12.x  come with Applications Lockdown
(ie permit only whitelisted apps/process to run) on the PCs?