When the ePO 5.x Policy Comparison feature is used to compare VSE 8.8 policies, you find that the following On-Access Scan policy options settings are swapped:

As an example, the Custom policy and the McAfee Default policy are set as outlined in the following table. You observe that for the Custom policy, the value for Scan on Read is True when it must be False, and Scan on Write is False when it must be True. The policy comparison results are being swapped for these two policy settings.