When updating shared policies in a multi-SEPM site, it's observed that the last three digits of the policy serial number will vary for the same client group when connecting to the SEPM console for different servers within that site.
For example, the same group might be seen with the following policy serial numbers when checking two different SEPM servers in an affected site:
ABCD-03/29/2018 12:00:00 123
ABCD-03/29/2018 12:00:00 456
This inconsistency can be observed after an extended period of time.
No specific errors are recorded; admins will observe that policy serial numbers are not consistent when checking client groups on the SEPM console for different SEPM servers. Also, clients within the same group will display with varying policy serial numbers, depending on which SEPM they last connected to.
Multiple SEP 14 RU1MP1 SEPMs loadbalancing within a single site. This issue has been observed both with and without SEPM Replication in use.
This problem is fixed in Symantec Endpoint Protection 14.2.
For information on how to obtain the latest build of Symantec Endpoint Protection, read ‘Download the latest version of Symantec Endpoint Protection’
http://www.symantec.com/docs/TECH103088