After upgrading to Symantec Endpoint Detection and Response (SEDR) 4.10 or 4.11, client enrollment is slow.
SEDR 4.10/4.11
Intermittent data synchronization delays between the SEDR appliance and the SEP Management (SEPM) server caused clients to get stuck in an authentication pending state.
This issue is resolved in SEDR version 4.12. Broadcom Support recommends customers upgrade to SEDR version 4.12 to receive this update as well as many others.