Add the below text to SoftwareUpdates.XML  above the statement "</softwareupdates>" at the bottom of the file. You can find this file in XML directory for steadystate 2.5.

  <software
    id="SymantecEP11"
    name="Symantec Endpoint Protection 11"
    detectionPath="SOFTWARE\Symantec\InstalledApps"
    detectionName="SAV Install Directory"
    append="SescLU.exe"
    script="SCTSymantecEndpointUpdate.vbs"
    category="Anti-Virus"  />

Then create this script file named "SCTSymantecEndpointUpdate.vbs" with the text below and save in the scripts dirctory for steadystate. Restart your machine after doing this and you will see Endpoint listed as a security program in SteadyState.

' ~~~ Force variables to be declared
' ~~~
Option Explicit

' ~~~
' ~~~ Turn on error handling
' ~~~
On Error Resume Next

' ~~~
' ~~~ Declare global variables
' ~~~
Dim sNortonPath, oShell, strComputer, oWMIService, ColProcesses

' ~~~ Create objects
Set oShell = CreateObject("WScript.Shell")

' ~~~ Set application path
sNortonPath = oshell.RegRead("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\LUALL.EXE\")

'~~~ Download Virus Signature
call oShell.Run("""" & sNortonPath & """" & " -s", 0, True)

' ~~~ Wait 5 minutes
WScript.Sleep (300000)

Has anyone successfully deployed/tested this?  What about future versions... will the script require changes? 

Just embedded into my XML and Scripts within Steady State.   WSS now recognizes the updates.
Just ran it on a Dell GX270 with windows XP in a Kiosk Setup.

Thanks ....

This code works on an XP computer that is in a VM in our test network. If you have any doubt, you can follow the paths of the registry keys to make sure LUALL.exe and SescLU.exe are where the script says that they should be located.