Here is the enviroment config:
Brocade ICX-6450 Layer 3 Switch as the Core Switch
Dell Poweredge server with VMWare hosting Windows 2008 R2 server with Sophos AV
HP Procurve 2510G layer 2 Switches on the floor
I discovered today that if I have endpoints that need to get updates from the Sophos server that they can't if they are in VLAN 2 - 8. The end point can't ping the server and the server cannot ping the endpoint. The exception to that is if the endpoint is in VLAN 9. I am not sure if this is a network issue or a server issue.