Hi durk2852
Try by repairing the client from add/remove programs.If note helps upgrade it to RU5 (11.0.5).RU5 having a fix for this problem
Proactive Threat Protection displays the status "Waiting for Update" after a client migration
Fix ID: 1456698
Symptom: Proactive Threat Protection displays the status "Waiting for Update" after a client migration.
Solution: After migration, Proactive Threat Protection should be "on" and should display the latest version.
Release notes for Symantec Endpoint Protection 11.0.x and Symantec Network Access Control 11.0.x
Note:This suggestion I am giving by assuming that your clients is able to communicate with SEPM,SEPM having updates and AV/AS getting regular updates in the client.