Hello,listena.
In online update, the latest signature database file is downloaded from the security platform website to the local device. After the update confirm { ips-sdb | av-sdb | sa-sdb | ip-reputation | cnc } enable command is run, the downloaded signature database is not immediately installed. Therefore, if you run the display version command, Download Version in the command output is the latest version, whereas Current Version is the earlier version. To install the signature database, choose System > Update Center on the web UI and click Update Immediately corresponding to the database. Or run the undo update confirm { ips-sdb | av-sdb | sa-sdb | ip-reputation | CNC } enable command to disable the confirmation before installation function. After that, the signature database downloaded to the local device is immediately installed, requiring no manual intervention.
Glad to help you! Any further questions, let us know.