Windows Defender definition updates

[Heaton, Joseph@Wildlife]

I have a finding on our latest Tenable scan, rated High, saying that a lot of my servers have Windows Defender definitions that are greater than 1 day old.   My servers check ConfigMgr every 8 hours for updates, so can anyone explain why they could get 2 or 3 days out from last update?  I also have alternate sources, but they aren’t checked until definitions are 72 hours old.  I want to make sure I’m up to date, obviously, but I also don’t want to create a massive amount of churn in the system.

 

Joe Heaton