Settings quick controls and manual live update

I recently installed Norton Security and all seems fine, however I have a couple of simple questions that I can't find an answer to in the manual or on here so would appreciate it if someone can clarify the following for me.

On the Norton settings drop down page under Quick Controls does a light blue cross in the little boxes next to the six items listed mean that the item is switched on or switched off? Apart from silent mode they all have a light blue cross in so i'm hoping this means on.

The one for Automatic Live Updates is set for 15 minutes and yet if I do a manual live update it still sometimes does some updates. Is this normal?

I have not altered any of these items since I installed NS.

Frank.