Fep definitions not updating
Use the following procedures to configure WSUS as a definition update source.
When this occurs, per the Updates and Windows on the client, other software updates may be deployed successfully, but examining the Updates on the client shows that the client is not detecting Forefront Endpoint Protection 2010 as a product.
To accomplish this task, you can configure automatic approval for revisions and automatic declining of expired updates.
For more information, see Microsoft Knowledge Base article 938947.
These updates sometimes include dashes as part of the article ID column in the database.
Solution In the command line arguments for the Software Update scheduled task, use single quotes around the article ID.
If you use WSUS to keep your antimalware definitions up to date, you can configure it to auto-approve definition updates.