SD WAN - can only select one interface

NAT and SD-WAN are different pieces in the product. See: https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/121408/routing-in-xgv18-with-sd-wan-pbr 

It interact differently with the product. 

so if i wanted a network to go out a differernt WAN, what would it be?

SD WAN or SNAT

ive read that, sorry it doesnt say anything about how to select more than one interface tho?

are you saying i can leave that as default ie "select interface"

and change "source networks" to all my network subnets i want to go out different WAN

Yes you do not have to fill anything in Interface selection. 

nice, so create two SD WANS and two SNATS, each for the one specific network and then the other networks, ie

one for specific network9 subnet > wan2

and other network1,2,3,4,5,6,7,8 subnets > wan1

You only need one SNAT, which uses MASQ. It will use the correct IP per Interface. 

thats very interesting, so create two SD WANS

one specific network subnet > wan2

all other network subnets > wan1

one NAT

fill in "any" in all and SNAT is "MASQ"

Yes. 

il give it a go and get back to you, im going to do it early one morning

do i need to change the policy in cli as i have heard depends what way it is is sd wan over vpn etc

Yes, you need to do this. Please review my Link, it is explained how and why this is needed. 

mmm, ok...

is there another way i can do this, if it is set incorrectly as i dont know the admin cli password, is there a way to reset it?

just found out only admin can ssh in (pretty stupid) but oh well

the routing policy atm is

static route - sd wan - vpn

hopefully that is the right one as i cant change it, but we do have ipsec site to site traffic, will that mess it up?

just found out only admin can ssh in (pretty stupid) but oh well

the routing policy atm is

static route - sd wan - vpn

hopefully that is the right one as i cant change it, but we do have ipsec site to site traffic, will that mess it up?