Hi Rafeeq,
Sorry for the delay...
My GUP distribute all the contents... The "I have a GUP who only distribute the IPS and SONAR definitions" was due to the "little" size of the GUP cache and the the large difference between the Virus Def on the client and the one relased by symantec.
The GUP had to deal, whit the minimum settings, whit a large amount of data and a large number of clients who needded to be up to date, and thats how he ended only distributing the lightest def (IPS and Sonar)...
But you can define which contenant the GUP can distribute to the client
Policys > LiveUpDate > the tab LiveUpdate Content : and then chosse
Hope that could help