SymHelp will quickly check for content definition corruption, disk space usage (including, particularly, the virus definition directory), service status as well as SEP client to manager communications. This is the fastest way to identify which direction of troubleshooting is most relevant in the case of definition update failure.