WSUS 3.2 not recognizing critical/security updates

Hi, guys!  Installation is WSUS 3.2 running under Windows Server 2008 R2; configured to download updates upon acceptance in console from Windows Update.  No downstream servers.  Config'd for English only, all Critical, Definitions, Security Updates, Service Packs, Update Rollups, and Updates [MSE, Defender, and all current Windows products (XP, Win7, Server(s), MS Office] ).

Problem: I've been running WSUS 3.2 for some time now, and up until about 1 month ago it's been working fine.  About a month ago it stopped recognizing any updates other than Windows Defender, Microsoft Security Essentials, and a number of Windows Server and Internet Explorer updates.   Daily sync is working perfectly (no errors recorded in any logs I can see), it's getting (for example) MSE/Defender updates daily, but there are no Critical Updates or Security Updates appearing at all in the list of necessary updates.

I have run the clean-up twice, selecting all options on the cleanup screen; report said it deleted thousands of items on first run, but there are still unapproved updates listed from 2005.  I have run an IISRESET and wuauclt /resetauthorization, rebooted the server, and still nothing.  Event log shows nothing related to WSUS failures or warnings.

I'd rather not uninstall and reinstall WSUS again, so hopefully someone has some suggestion that might help.  Any way to reset the catalog?  Or a log somewhere that may be showing details on what categories of updates it's actually checking each night with MS?

Thanks!
SteveB