Sophos Anti-Virus reports to windows that it is out of date

It's me who has to apologize, Nick

I'm not sure what you mean by "console"

I didn't read carefully and as you posted this to this forum (and not Small Business) I used console. Sophos Enterprise Console (SEC) is the "enterprise version" of SCC.

hovering the mouse over the Sophos icon

... gives you the last successful check for updates - i.e. the client has contacted the server, and either downloaded and installed the updates or verified that there's no new stuff. It does not indicate the time an update was applied. This can be seen on the client - open the GUI, bottom left you see View product information, in the resulting window expand Software. The last item in the list (Last updated) is the one you are looking for. From what you posted it should indicate Nov 8th or 9th. You should, BTW, see 10.2.2 for Anti-Virus, 4.84 for Detection data and (right now) 258 for Detection identities.

the desktop client updating log is empty

You mean View updating log from the GUI? This would be rather strange. You should find the logs in %ProgramData%\Sophos\AutoUpdate\Logs. Both alc.log and the newest ALUpdate...log should have a modified date corresponding to the one given in the "hover" tip.

It looks like your clients didn't really update since Nov 9th - do all most show 09/11/2012 22:44:11? To make sure the CID is not stale check the modified date of the .upd files in the root of the CID (...SophosUpdate\CIDs\S000\SAVSCFXP\) and the newest .ide in the \savxp subfolder. If these are from today then the problem is likely with AutoUpdate on the client side - if not, it's probably the server.

Christian

It's me who has to apologize, Nick

I'm not sure what you mean by "console"

I didn't read carefully and as you posted this to this forum (and not Small Business) I used console. Sophos Enterprise Console (SEC) is the "enterprise version" of SCC.

hovering the mouse over the Sophos icon

... gives you the last successful check for updates - i.e. the client has contacted the server, and either downloaded and installed the updates or verified that there's no new stuff. It does not indicate the time an update was applied. This can be seen on the client - open the GUI, bottom left you see View product information, in the resulting window expand Software. The last item in the list (Last updated) is the one you are looking for. From what you posted it should indicate Nov 8th or 9th. You should, BTW, see 10.2.2 for Anti-Virus, 4.84 for Detection data and (right now) 258 for Detection identities.

the desktop client updating log is empty

You mean View updating log from the GUI? This would be rather strange. You should find the logs in %ProgramData%\Sophos\AutoUpdate\Logs. Both alc.log and the newest ALUpdate...log should have a modified date corresponding to the one given in the "hover" tip.

It looks like your clients didn't really update since Nov 9th - do all most show 09/11/2012 22:44:11? To make sure the CID is not stale check the modified date of the .upd files in the root of the CID (...SophosUpdate\CIDs\S000\SAVSCFXP\) and the newest .ide in the \savxp subfolder. If these are from today then the problem is likely with AutoUpdate on the client side - if not, it's probably the server.

Christian