Manual download pattern versions

Unfortunately pattern updates are not available or uploadable to a UTM as individual files. You'll need to solve the issue with your UTM not being able to contact Sophos servers to get the pattern updates.

1) Do you have a MASQ rule in place?
2) What do you have set in the UTM for DNS servers?
3) Is there an upstream firewall or proxy that could be blocking the connection?
4) Go to Management > Up2Date > Configuration and change the Pattern download interval to manual. Now on the Overview Tab, use the Update Patterns Now button. What errors or fails do you see in the Up2Date messages log? You can also gather information from running in shell (audld.plx --trigger for example). See www.sophos.com/.../115382.aspx.

A couple of times I ran into odd ISP situations that caused the UTMs to not be able to contact Sophos update servers. These were ISP that put customers WAN connections into private networks and forced use of only the ISPs DNS, which wouldn't resolve the Sophos up2date servers, for whatever reason. The fix was to create static DNS entries on the UTM for the up2date servers. Not saying this is your issue, just an example. The answers to the above should help narrow things down a bit.

Thanks for your reply.
I have tried repeatedly to get this to update, reset a dozen times and reinstalled 4 times.
Let me explain how I have this set up. I'm using the UTM in full transparent mode, it sits in front of my router and I'm using the web admin. I have no MASQ rules and I have dns forwarders off because I'm using the routers settings. I have every port open on my router for Sophos services, even tried a dmz for the UTM.
I see that the firewall has blocked over 600 packets from my router. Most of the destinations blocked is
for 224.­0.­0.­1 Looking into the up2date log files I see over and over

2015:12:29-21:05:15 sophosutm audld[2188]: id="3703" severity="error" sys="system" sub="up2date" name="Authentication failed, no valid answer from Authentication Servers"
2015:12:29-21:05:15 sophosutm audld[2188]:
2015:12:29-21:05:15 sophosutm audld[2188]: 1. Modules::Logging::alf:100() /</sbin/audld.plx>Modules/Logging.pm
2015:12:29-21:05:15 sophosutm audld[2188]: 2. Modules::Audld::Authentication::start:70() /</sbin/audld.plx>Modules/Audld/Authentication.pm
2015:12:29-21:05:15 sophosutm audld[2188]: 3. main::main:174() audld.pl
2015:12:29-21:05:15 sophosutm audld[2188]: 4. main::top-level:40() audld.pl
In my firewall rules I have it open for my network. Any-Any-Any and it's also open for Sophos live connect.
Any ideas or suggestions? Thx.

Thanks for your reply.
I have tried repeatedly to get this to update, reset a dozen times and reinstalled 4 times.
Let me explain how I have this set up. I'm using the UTM in full transparent mode, it sits in front of my router and I'm using the web admin. I have no MASQ rules and I have dns forwarders off because I'm using the routers settings. I have every port open on my router for Sophos services, even tried a dmz for the UTM.
I see that the firewall has blocked over 600 packets from my router. Most of the destinations blocked is
for 224.­0.­0.­1 Looking into the up2date log files I see over and over

2015:12:29-21:05:15 sophosutm audld[2188]: id="3703" severity="error" sys="system" sub="up2date" name="Authentication failed, no valid answer from Authentication Servers"
2015:12:29-21:05:15 sophosutm audld[2188]:
2015:12:29-21:05:15 sophosutm audld[2188]: 1. Modules::Logging::alf:100() /</sbin/audld.plx>Modules/Logging.pm
2015:12:29-21:05:15 sophosutm audld[2188]: 2. Modules::Audld::Authentication::start:70() /</sbin/audld.plx>Modules/Audld/Authentication.pm
2015:12:29-21:05:15 sophosutm audld[2188]: 3. main::main:174() audld.pl
2015:12:29-21:05:15 sophosutm audld[2188]: 4. main::top-level:40() audld.pl
In my firewall rules I have it open for my network. Any-Any-Any and it's also open for Sophos live connect.
Any ideas or suggestions? Thx.