Hello Brian,
the versions you post are the recent ones. You'd need to differentiate between engine versions and rules versions. Engines do not get updated on a daily base and it is seen as normal when the timestamp is two months old, as this is usually the interval an engine is getting released.
For Sophos, the IDE timestamp should not be older than a day, the same applies to the Anti-Spam content rules and structural rules as they're getting updated quiet often (several times per day).
You can enforce a full update of both Anti-Spam and Anti-Virus by issuing the commands 'antispamupdate ironport force' and 'antivirusupdate force' on the Command Line Interface (CLI). Please allow the appliance to process the full update for approx. five minutes. If everything worked well, then 'antispamstatus' and 'antivirusstatus' on the CLI will display the timestamp on all items when the forced update was carried out.
Hope this helps.
Regards,
Martin