Ivanti handles the AV client updates through our own scheduler, not through the AV client itself. So, it's actually working as designed that automatic updates would be turned off in the client itself. It's not a cause for concern, although we have seen that end users become concerned when they see it because they don't understand that we use a different scheduler to kick off automatic updates.
What core version are you running? We've been working with Kaspersky to modify the text that displays to alleviate the perceived problem.