There are new Microsoft signed iPXE Files available for Symantec ITMS 8.7.1 and Ghost Solution Suite.
The updated binaries do not require disabling of DMA protections and Virtualization in the BIOS. This was necessary for some OEM manufacturers like Dell, HP and Lenovo in the past to get PXE or iPXE to work.
They are also part of the upcomming ITMS 8.7.2 and GSS 3.3 RU12 releases.
For detailed instructions on how to use these new iPXE Files check this KB: https://knowledge.broadcom.com/external/article?articleNumber=280113
Big shoutout to the Essential Software Products Group @Broadcom.
We highly appreciate the effords to make this happen!
Endpoint Management 