Start by verifying the 'effective' policies applied to one of these machines.
Find one of the machines in the sytem tree.
Select it by ticking the box next to its name.
From the Actions menu, select Directory Management - View assigned policies.
Pick your point product, check the assigned policy is correct.
If it seems correct, verify the agent is actually communicating to get the right policy.
(check last communication time again in the system tree).
If it is communicating and looks like the right policy is applied but still misbehaves then you should probably speak to McAfee support at that point.