Will answer the question below.
I've made these additions and still having issues. Investigating but I expect it's IPS (currently blocking High Risk 4/5).
Hi,
please refer to this thread.
https://community.sophos.com/products/xg-firewall/f/firewall-and-policies/108190/mojave-and-the-new-news-application
Ian
Since adding the extra lines, I have been able to remove some of the bypass just leaving HTTPS and policy intact.