Hello,
How many Windows 7 machines are not updating with the definitions?
Since the policies are updating, the communication is perfect.
Could you upload us the sylink.log from the client machines to check the root cause of the issue:
How to enable Sylink debugging for the Symantec Endpoint Protection 11.x and 12.1 client in the Windows Registry
http://www.symantec.com/docs/TECH104758
Secondly, check this Article:
Symantec Endpoint Protection: LiveUpdate Troubleshooting Flowchart
http://www.symantec.com/docs/TECH95790
Secondly, on a kind note: It is recommended to the migrate to the Latest version of Symantec Endpoint Protection version 11.0.7300
About Maintaining Consistency of Software Versions throughout a SEP 11 Organization
http://www.symantec.com/business/support/index?page=content&id=TECH131660
Hope that helps!!