Sophos automatic updates ERROR Could not find a source for updated packages

Sophos automatic updates error

We will look at Sophos automatic updates issues with endpoint security and control software. Typically Sophos automatic updates fail due to multiple reasons which include connectivity or wrong credentials.


You will likely to see one of the following errors during Sophos automatic updates.

ERROR: Could not find a source for updated packages [0x00000071]

An endpoint computer fails to update (‘Could not contact server’)

Sophos Endpoint Security and Control has failed to download updates.

Sophos Protection Updating: failed

sophos automtic updates failed

Cause of this error:

Sophos AutoUpdate (SAU) is incorrectly configured:

The address attempting to be contacted is invalid or unreachable.

  • The username is incorrect.
  • The password is incorrect or has expired.
  • The computer is experiencing network connectivity problems.


Reconfigure the automatic configuration of Sophos Endpoint with correct credentials and setup the update location.

Sophos Update

Method 2:

  1. On the endpoint server or computer go to:
    • 32-bit: C:\Program Files\Sophos\AutoUpdate\Config\
      64-bit: C:\Program Files (x86)\Sophos\AutoUpdate\Config\
  2. Run Notepad as administrator and open the iconn.cfg file which contains Sophos autoupdate information..
  3. Look for the line that has AllowLocalConfig = 0
  4. Change this value from 0 to 1
  5. Now save the iconn.cfg file to write the changes
  6. Close Notepad as it’s no longer needed
  7. In the system tray right-click on the Sophos application icon
  8. Select the ‘Open Endpoint Security and Control’ option.
  9. Within the home screen, under the Updating section, select the Configure updating option.

If the configuration does not take newly entered credentials then uninstall Sophos and reboot the server. Once the reboot is completed re-install Sophos Endpoint and configure automatic update again.

  • Within Primary location section ensure path entered can be browsed from the local endpoint computer.

Add a Comment