Before you begin to create automatic deployment rules, make sure that you have configured Configuration Manager software updates.For more information, see Software Updates in Configuration Manager.Clients connect to the WSUS server to check for applicable updates and then request the latest approved definition updates.Use the following procedures to configure WSUS as a definition update source.Endpoint Protection definition updates must be approved and downloaded to the WSUS server before they are offered to clients that request the list of available updates.
Updated: September 14, 2015Applies To: System Center 2012 R2 Endpoint Protection, System Center 2012 Configuration Manager, System Center 2012 Configuration Manager SP2, System Center 2012 R2 Configuration Manager, System Center 2012 Endpoint Protection SP1, System Center 2012 Endpoint Protection, System Center 2012 R2 Configuration Manager SP1With Endpoint Protection in Microsoft System Center 2012 Configuration Manager, you can use any of several available methods to keep antimalware definitions up to date on client computers in your hierarchy.
The information in this topic can help you to select and configure these methods.
This procedure is only for the items that must be specifically configured for Endpoint Protection.
For more information about the Create Automatic Deployment Rule Wizard, see Operations and Maintenance for Software Updates in Configuration Manager.
To update antimalware definitions, you can use one or more of the following methods: You can configure multiple definition update sources and control the order in which they are assessed and applied.
This is done in the Configure Definition Update Sources dialog box when you create an antimalware policy.