hi,
though you are using the old version of SAV ( latest being 10.1.8) , the 10.1.5 will catch the threat on real time ( functionality of Auto Protection) , there is no need to buy add on. Yeah, you can upgrade the version.
Also how are the updates done in relation to the malware and what is the best way for me to check the overall health and status of malware protection on our network.
Updates to client is the way you/administrator would hvae configured. It will be 1) from SAV parent server
2) Symantec Liveupdate 3) Internal LiveUpdate administrator
The best way to check health status is through SSC console. This will give the real time information of client connected to server and their Av definition status.
Cheers
Pete