Symnatec Vulnerability Add-on GPO

Im about to update all my clients to 12.1 Ru4 from 11.7 and I noticed on my test machines that IE ask about enabling the Vulnerability Add-On.

I've already read in a few forum post about creating the GPO's but what i was wondering is each time a new update is released do i have to create a new GPO for that paticular release?  Because when looking at the GPO some of the entries needed include a version specific file path.