There is a discrepancy in the figures on the Endpoint Status on the Symantec Endpoint Protection Manager (SEPM) dashboard and the actual report.
E.g.
Out-of-date - xx
Disabled - xx
When one clicks on the number xx to open the Endpoint Status report, it shows a different count in the report than the count displayed on the dashboard.
The issue was caused due to an inconsistency in the SQL queries used for the home page and the details page.
This issue is fixed in Symantec Endpoint Protection 12.1 Release Update 4 (SEP 12.1.4). Please upgrade to take advantage of this and many other important enhancements and improvements.