Avast SOA do not remove shields from endpoint clients

Hello.

I have a Avast Small Office consola and 20 clients divided in two groups, in one group i have deactivated network shield but the clients if i look into endpoint i see that is activated…
In SOA it appear as ok and deactivated.