With using the XG as DNS responder, is there a logfile that is recording the requests?
By looking at Log file details - Sophos Firewall none of those files contain the actual logging of the requests and respondses.
This thread was automatically locked due to age.