I have SEPM server 11.0.7101 which i apply the definination updates manually to be distributed to clients. No live update used just the SEP Management server. The clients get the AV definitions updated but the firewall (although status is green) definitions are old. I am making assumption that the ips signatures is what the definition date stamp is for the firewall. Why arent the ips signatures loading? BTW. The SEPM console also reports that the ips signatures are of the old date. So it appears that the SEPM is not processing the ips signatures when the jdb file is loaded. Thanks for your help.