Forefront virus definitions not updating
Before you begin to create automatic deployment rules, make sure that you have configured Configuration Manager software updates.
For more information, see Software Updates in Configuration Manager.
Clients connect to the WSUS server to check for applicable updates and then request the latest approved definition updates.
In addition to manual approval, you can also set an automatic approval rule for definition updates and Endpoint Protection updates.
If you use WSUS to keep your antimalware definitions up to date, you can configure it to auto-approve definition updates.
Although using Configuration Manager software updates is the recommended method to keep definitions up to date, you can also configure WSUS as a method to allow users to manually initiate definition updated.
I want to propose new antivirus for them but I cannot find out if FEP 2010 is discontinued.
This will configure WSUS to automatically approve Endpoint Protection definition updates downloaded by WSUS.
To maximize performance on your WSUS server and client computers, decline old definition updates.
Only one advertisement can run at a time on the client computer.
Therefore, if an advertisement is running on the client computer that could potentially take a while to complete (such as a full scan on a computer with a large hard disk), subsequent advertisements are processed after that advertisement completes.