Our FEP clients are configured to download definition updates from WSUS. They seem to be doing this, but not as frequently as they should; the policy is set to check for updates every 7 hours, but they do not usually download updates until definitions are a week or more out of date.
This seems to be true even if we try to force an update by clicking the Update button on the FEP client. For example, my client right now shows "Definitions created on" 2/13/2012, but "Definitions last checked:" shows a 2/15/2012 timestamp (I clicked the button a few minutes ago).
While the definitions on my workstation are two days out of date, other computers on the network have today's definitions, so it looks like the definitions on the SCCM server are up to date.
What's going on here?