Virus definitions are updated on agent client machine as usual however the virus definition version shows outdated in Cloud Workload Protection (CWP) console.
If the agent is rebooted or if smc restart is done, the virus definition version is updated in CWP console.
This issue is caused due to incorrect handling of update callbacks which resulted in the malware protection opstate update delays
This issue is fixed in Windows SEP 14.3 RU5 version