Definitions fail to update on an Endpoint Protection 14 client until the computer is rebooted when the scheduled scan tuning is set to "Best Application Performance".
Long-running scheduled scans delay definition updates until the scan completes or is canceled. Restarting the system cancels the scan and allows the definitions to process on reboot.
This issue is resolved in Symantec Endpoint Protection (SEP) 14 MP2. For more information on upgrading, please see Upgrading and Migrating to the Latest Release of Symantec Endpoint Protection (SEP)
To workaround issue:
To avoid rebooting the system, SMC can also be restarted when the behavior occurs by running the command "smc -stop" followed by "smc -start".
Scan tuning can be changed to either "Balanced Performance" or "Best Scan Performance" to allow the scan to complete: