Hi,
Thank you for posting in Symantec community.
You might not find best practices articles for SEP 12.1.5 slow performance issues on clients
Slowness can be associated with different factors like database slowness, system slowness or SEPM slowness etc.
Process Monitor is an advanced monitoring utility that shows real-time file system, registry, and process/thread activity. This log is useful in a wide variety of cases such as: a process hanging or using 100% CPU
For SEP slowness you may need to review specific logs like userenv.log. This log checks for login scripts, and other windows modules that loads.
You may find supported articles to improve the overall performance.
Adjusting scans to improve computer performance
http://www.symantec.com/docs/HOWTO55250
Randomizing scans to improve computer performance in virtualized environments
http://www.symantec.com/docs/HOWTO55262
Also you should consider network design best practices to have better performance.
Top 10 Symantec Best Practices - Deploying Symantec Endpoint Protection Architecture
http://www.symantec.com/business/support/index?page=content&id=TECH92051&locale=en_US
Network architecture considerations
http://www.symantec.com/docs/HOWTO55114