does enabling the firewall make the system to be working fine in report? 

The odd thing is I pushed full protection package and Windows is reporting that the firewall is being managed by Symantec Endpoint Protection.  I'm not seeing any notification on these clients that the firewall is turned off, but SEPM is reporting that it is Not Enabled.  On the client I'm not seeing a mechanism to turn the firewall on or off.  It says installed is "Virus and Spyware Protection", "Proactive Threat Protection" and "network Threat Protection".

Only 2 of the clients are showing Virus Definitions "not available" in SEPM, but the client on both of those machines says "computer is protected, no problems detected".

I'm not sure if this is anything, but one of the clients coming up as "Disabled" is also the machine SEPM is running from.  But again -- the client on that machine is coming up as everything running fine also.

The Disabled piece refers to any component so this is expected. It is misleading. It should read something like "Component Disabled" instead of just disabled as it gives off the wrong impression.

So in your case the firewall is disabled but everything else is enabled and your still seeing disabled on the Home screen unless you open it up and take a deeper look.

For the other piece, it sounds more like a cosmetic issue, especially if clients are showing correctly. Can you force the client to check in, maybe it just hadn't reflected properly in the SEPM after the last heart beat.

Thanks for the clarification on the reporting screen.

The client says status is connected.  How do I force the check-in?

As a side thought...if I want to enable the firewall how do I do that?  So far every client upgraded says firewall is off in SEPM, but I'm not seeing how to turn it on at the client even though windows claims SEP is managing it.

I tried updating the policy on one of the clients and SEPM still shows virus defs not available.