Check the status of reported client in SEPM console
If client is ”’active”’, Run "Update Content" command from SEPM. To verify what definitions that client running with, check below files:
C:>type " name>c$Program FilesCommon FilesSymantec SharedVirusDefsusage.dat" (definitions in use)
C:>type " name>c$Program FilesCommon FilesSymantec SharedVirusDefsdefinfo.dat" (definitions dates)
If there are any errors like "TruScan has generated an error: code 11: description: Whitelist Failure" in above, check further about the error and possible fixes at Symantec/internet forums/sites.
Run the "" utility to completely remove and replace definitions.
p>If still no luck, notify the user to save data and restart the PC and see if it gets updated.