After deploying the SES client on macOS clients, or updating an Allow (whitelist) policy that is used by macOS clients, they may show a persistent 'Pending' message and AV functions do not work.
macOS SES client 14.3
The cause is the presence of SEP policy settings that are not compatible with macOS; the SEP client should just ignore any such settings, but in some instances they will trigger a SymDaemon crash and this popup. For example, the Allow/Whitelist policy does not support certificates, domains or hash entries for Mac clients
This issue has been resolved with the SEP 14.3 RU2 release for macOS clients.