Symantec endpoint managed client not updating
For more information, see Microsoft Knowledge Base article 938947.
When you select to download definition updates from Microsoft Update, clients will check the Microsoft Update site at the interval defined in the Definition updates section of the antimalware policy dialog box.
This is done in the Configure Definition Update Sources dialog box when you create an antimalware policy.
You can configure Configuration Manager software updates to deliver definition updates to client computers.
Use the following procedures to configure WSUS as a definition update source.
The SEPM shows old virus definitions in "Admin Server Activity logs may provide details on the nature of the failure.
One possible cause is that old or corrupted virus definitions present on the SEPM prevent the SEPM's ability to update the SEP clients with new virus definitions.
Managed Symantec Endpoint Protection (SEP) clients do not update virus definitions.
These clients are configured to receive their updates from their Symantec Endpoint Protection Manager (SEPM).