The Symantec Endpoint Protection Manager (SEPM) Endpoint Status area on the Home screen shows one or more managed SEP clients are out of date. However, the Clients screen indicates that all clients are using the most recent Virus Definitions.
The environment overview on the Home screen polls several types of updated content to determine if a client is up to date. Clicking on the pie chart will bring up a window with detailed status information.
To the right of the status details window, you can see that Antivirus Content, IPS Signatures, SONAR Content and Download Protection Content are listed as well as the date of the content on each client.
If you have protection installed that is not up to date, this will cause the Home screen to indicate that there are out of date clients.
Symantec Endpoint Protection (SEP) versions 12.x and 14.x
Make sure that your SEPM console is able to access the Internet or an internal LiveUpdate Administrator 2.x (LUA 2.x) server which has been able to download definitions from the Internet. Perform a LiveUpdate from the SEPM, and monitor as the SEPM updates the managed clients to which it supplies new content.
If your SEPM is not able to download new content, but does have access to the Internet or an LUA 2.x, then you may wish to troubleshoot LiveUpdate issues using available Knowledge Base documentation or by contacting Symantec Technical Support.
If you are in an environment where Internet access is restricted, the information in How to update content on a Symantec Endpoint Protection Manager that doesn't have Internet access may be useful.