Forefront definitions not updating wsus
A few drawbacks of this option are that the UNC file share is not populated automatically and it does not take advantage of binary delta differentials.
If we select this option, we must also define the UNC paths in the definition updates section of the antimalware policy. This option modifies both the Fallback Order key and the Definition Update File Share Sources key.In these situations, we’ll need to better understand the setting for definition update sources in the Antimalware Policy.If you’re not familiar with this, navigate to Assets and Compliance, Endpoint Protection, Antimalware Policies.Of the two Microsoft hosted fallback locations, this is ideal as it results in the smallest payload delivered to the client.Configuration Manager admins generally stay out of the WSUS console, except to periodically perform a WSUS cleanup or other maintenance.By default, this is set to 4,320 minutes, or 72 hours.
You can modify this value in your Antimalware Policy.
It will look something like this: I do hope this post helps you better understand the flow of SCEP definition updates.
Please post any comments or questions and I’ll respond when I can.
NOTE: It looks like Forefront is getting the definition updates just fine but even if I do a manual Windows update check the client/AV Engine updates do not even show up as an option.
Nothing in the update logs that I can see to shed any light onto the cause.
This value represents (in minutes) the amount of time the SCEP client will ‘sleep’ and wait for CM to bestow signatures upon it.