Develop your software to support silent updates while no user is logged in to a Mac.

Symantec claims Apple's security model prevents silent updates while no user is logged in to a machine. That may be true with the current software but it's your responsibility to rewrite your code to work within Apple' security framework. I don't care if you rewrite LiveUpdate or integrate with SEPM.

Enterprise customers cannot afford unpatched machines, especially when under ISO compliance. Telling enterprise customers to log in to every Mac to update antivirus definitions is unacceptable.