Forefront not updating from wsus
(Just a thought) Let’s take a look at how you setup Forefront in Config Mgr, and how you can manage it.
First you have to install the Endpoint Protection role via the console.
Maybe its something they needed to compete with Symantec Altiris ?So I right click the policy and choose “Deploy” When you now install a agent on a computer that resides within that collection, I will get SCEP installed.If you watch the install log you will find multiple references to file.There are system policies that allows access to the Windows update server. If it all works it is great, if it doesn't it's a pain to troubleshoot.My scenario involves a TMG array placed behind the external TMG array, so no direct internet access is available.