To successfully and efficiently protect your clients, you will also need to deploy the latest definition updates to your clients. Endpoint protection client definitions are similar to signature updates in other antivirus products. They are available via Windows Server Updates Services (WSUS) and can be downloaded and deployed using Configuration Manager.
In order to deploy the definition updates, you first need a software update point. This is actually a prerequisite for setting up the endpoint protection point anyway, so it should already be in place.
Configuration Manager supports the deployment of definition updates just like any other update. They are treated the same as a regular security update for Windows or a critical update for Internet Explorer.
Ensure that in your software update point, component settings under the Sites node in the Administration workspace has the category Definition Updates and...