The Symantec Endpoint Protection for Macintosh 11 client does not update virus definitions from a Symantec Endpoint Protection Manager or Group Update Provider. The Macintosh client will need to retrieve updates directly from a LiveUpdate server. This server can be the default Symantec LiveUpdate server, or an internal LiveUpdate server maintained by the system administrator.
Reference:
Will a managed Symantec Endpoint Protection for Macintosh client update virus definitions automatically from a SEPM or GUP?
Q. How can I configure the SEPM to supply definitions to SEP for Mac clients?
A. Unfortunately, the SEPM is not able to host or make available content (definitions or product updates) for SEP for Mac clients. All updates must occur through LiveUpdate, either from Symantec's servers, or from an internal LiveUpdate server using LiveUpdate Administrator (LUA). Please see 'Using the LiveUpdate Administrator on a PC to download updates for Symantec Endpoint Protection/Symantec AntiVirus 10 for Macintosh clients' for information on how to configure LUA for this content. Note: it is not recommended or supported for LUA and SEPM to be on the same physical server.
Q. Can a SEP for Mac client get updates from a Group Update Provider (GUP)?
A. No, for the same reasons outlined above.
Q. Can a SEP for Mac client act as a GUP?
A. No.
Q. How do I get Rapid Release definitions onto my SEP for Mac client?
A. Rapid Release definitions are not available for Mac security products. There is an Intelligent Updater, however.
http://www.symantec.com/business/support/index?page=content&id=TECH134203