SEC 5.5.1 - Application Control - multiple clients "Awaiting Policy Transfer"

Hi All

We have multiple application control policies showing "Awaiting Policy Transfer".It's been like this for weeks now and we cannot unblock legit applications.Looking at the router.log ona effected client I see a couple of errors  -

01.05.2018 12:52:46 2E04 E ACE_SSL (10908|11780) error code: 336462231 - error:140E0197:SSL routines:SSL_shutdown:shutdown while in init
01.05.2018 12:52:46 2E04 E ACE_SSL (10908|11780) error code: 336462231 - error:140E0197:SSL routines:SSL_shutdown:shutdown while in init
01.05.2018 12:52:46 2E04 E ACE_SSL (10908|11780) error code: 336462231 - error:140E0197:SSL routines:SSL_shutdown:shutdown while in init

2E04 E NewCertificate: Caught CORBA system exception, ID 'IDL:omg.org/CORBA/TRANSIENT:1.0'

01.05.2018 13:49:14 2E04 E Router::GetCertificate: Caught CORBA system exception, ID 'IDL:omg.org/CORBA/OBJECT_NOT_EXIST:1.0'
OMG minor code (2), described as '*unknown description*', completed = NO

any ideas?

thanks

K