SEPM stops to update definitions

Hello,
I have project for 300+ endpoints with SEPM (14.0.1904.000) installed on server under windows2012r2. Mostly all endpoints have 14.0 version, but few still under 12.1.
Whole network have no access to Internet so all definitions updates goes through .jdb files. Today i apply latest .jdb files and its applies ok (..\content\incoming is empty now, no .err folders). But latest on manager still remainis old (1/9/17 r1). On all endpoints "Proactive Threat Protection" and "Network Threat Protection" has been updated, but "Virus and Spyware Protection" remains old version. 
Can someone advise?