Here's a recent suggestion that was published into a KB article!
Sophos XG Firewall: How to export and view emails that are in the Mail Spool in MTA mode
.