There used to be an xprotect feed that had a version clients could cross-reference, which sounds like a silly way to verify they're up to date (having every client hit the WAN for that one site, and parse it)