Definitions fail to update on an Endpoint Protection 14 client until the computer is rebooted when the scheduled scan tuning is set to "Best Application Performance".
Long-running scheduled scans delay definition updates until the scan completes or is canceled. Restarting the system cancels the scan and allows the definitions to process on reboot.
This issue is resolved in Symantec Endpoint Protection (SEP) 14 MP2. For more information on upgrading, please see Upgrade or migrate to Endpoint Protection 14
To workaround issue:
To avoid rebooting the system, SMC can also be restarted when the behavior occurs by running the command "smc -stop" followed by "smc -start".
Scan tuning can be changed to either "Balanced Performance" or "Best Scan Performance" to allow the scan to complete: