form ePO server check Access Protection policies if it is enbaled or disabled for these servers, make sure that all servers get the enabled policy.
Were you able to resolve this? There are a number of possible reasons for this. Some more information would be helpful.
Does another AV or Threat Protection software reside on those servers? Sometimes they don't play nice...
Did you just deploy VSE recently? If they haven't got their first update/DAT yet they will remain in a Disabled state...
If you simply need instruction on locating the AP policy in ePO let me know.