Why are you unable to do a group update?
This can happen due to a change in the name given to Virtual Server Protection agents inside SiteProtector. If you have agents on the old product name (Proventia Server for VMWare), that name will stay the same after upgrading SiteProtector. If you then add new agents, they will be labelled with the upgraded name (Virtual Server Protection). Having agents with both names in the same group will prevent the group update from working properly.
If the above information does not resolve your issue, please contact IBM Security Systems Customer Support.