Hello,
Do I need to run the Virtual Image Exception Tool on each of these servers, and then instal the SEP VDI package on those servers?
No, You need to run the Virtual Image Exception Tool only on the base image, by doing these the image files would let clients bypass the scanning of the base image files for threats. This feature reduces the resource load on disk I/O and on the CPU.
Note: You need to have SEP client installed on the base image and ensure a full scan is run with latest definitions. Upon doing this, it ensures the image is clean and does not carry any infection.
Check these Articles:
https://support.symantec.com/en_US/article.HOWTO81102.html
https://support.symantec.com/en_US/article.HOWTO55325.html
Regards,