As WSUS does not seem to be picking up / distributing the downloads.
Within the administration console, the scanner updates are showing outdated date-stamps for last-update: EXAMPLE: Kaspersky (12/04/10) Worm List (14/03/10) I am not sure whether these dates are normal for the scanner updates?As the scanner are probably not updated daily, however, Where do see the latest pattern / definition updates?In general, is Forefront Server Security a better solution that say Symantec End Point protection?Although all updates seems be up-to-date, the yellow exclamation mark icon is still lit.In the "Forefront Server Security Administrator" the Kaspersky, Worm List and Sophos are respectively very outdated.Thanks Suliman, We are running WSUS on the same server as MS Forefront Security and is set to sync directly from Microsoft (once a day) The Windows updates also show "Windows is up-to-date" in the Windows update section.Is it necessary to verify the "http connection" for WSUS, as it is running on the same server as Fore Front Security? Notice that the Microsoft Anti-Malware Team updates the definitions on the security portal On the until check boxes, click Duration and choose 2 hours and 30 sure that "if the task is still running, stop it…" checkbox is cleared 3. Change the "stop the task if…" setting to 30 minutes and click ok. On the task configuration page, type the application Task name,"mpam-fe.exe". On the task configuration window, select "Microsoft Forefront Client Security Agent" Target Role. Notice that this user does not have to be administrator on the computer, but it does need to have the ability to run scripts and appropriate permissions on the definitions folder. On the summery page, check the open advanced properties check-box and click finish. On the advanced properties window, go to the schedule tab and click advanced. On the advanced scheduling options, set your schedule for checking and downloading new definitions. On the Task Run Location and Type page, choose run location: "Agent-Managed computer" and Task Type: "Command line" 5.I clicked the UPDATE button and the administrator seems to be updating Kaspersky scan-engine.I will try this will all outdated items in the list and see if it resolved the Client-Security issues also. Helps make sure that your firewall rules are working as intended.