Recently upgraded to SEPM 14 and started migrating ~300 endpoints to the new version 14 client from 12.1.6. Since the migration started we started seeing a lot of new issues with clients getting out of date virus definitons. There seems to be a coorelation between clients that got the updated client, but haven't rebooted and those are have old virus definitions. Is this expected behavior? I'm hoping to not have to reboot my endpoints right after the client upgrade if I don't have to.
Running LiveUpdate on the clients does fix the issue as they get the definitions from the Internet instead of our local SEPM server.
I can validate that the SEPM server itself is getting the definition updates and is properly deploying them to most of our endpoints.