If you open an existing service definition you cannot change the type ie TCP to TCP/UDP. If you delete and recreate the definition you can then select from the type dropdown.
Never mind beaten to the punch again[:$]
https://community.sophos.com/products/unified-threat-management/astaroorg/f/98/t/67795
