You cannot say for sure what causes this behaviour as there could be more reasons,
1) Check all the Liveupdate policy on your groups, check how many of them get updates from SEPM, GUP, Internet, Luadmin
2) Check computer status report, Check the defs date, If they are out of date, Check the last connection time of the Client, see how its confgured to get updates
3) Keep this handy if you face any
Symantec Endpoint Protection: LiveUpdate Troubleshooting Flowchart
http://www.symantec.com/business/support/index?page=content&id=TECH95790