After you boot your client machine, you experience a significant delay in loading of Symantec Endpoint Protection (SEP) services due to which policies are not taking immediate effect after booting.
SEP 14.3.x
It could be because of disk latency on client machine. Due to disk latency threshold is high at the time of SEP service loading after boot and delay is by default value is 5mn or 300 secs. It is a SEP feature to load its Delay load features once Disk IO relaxes.
To override this default delay loading of SEP service:
Backup registry key before making any changes.
Create registry: HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec Endpoint Protection\SMC "BootTimeout"=dword:00000001
Note: You may need to turn off tamper protection before creating registry. Please follow steps in below article for disabling tamper protection:
https://knowledge.broadcom.com/external/article/156680/disable-tamper-protection.html