Will this work?
Hey Nick Costelloe
Welcome to the Sophos Community!
Yes, that rule should work :)
For extra reference, check out this KBA:
Let me know if you run into any issues.
Regards,