Sorry, I have been away from the forums for a while. My apologies if this has already been asked.
I think this was supposed to be fixed in this release, but I have no time to test the beta this time round.
in V6 you could use network groups for policy based routing, it was not available/broken in V7, does this release add it?
see these old threads for background information
https://community.sophos.com/products/unified-threat-management/astaroorg/f/92/t/66658
https://community.sophos.com/products/unified-threat-management/astaroorg/f/93/t/66819