Under https://docs.sophos.com/nsg/sophos-firewall/20.0/help/en-us/webhelp/onlinehelp/AdministratorHelp/WebServer/ProtectionPolicies/WAFProtectionPolicyAdd/index.html (the documentation to add a Web protection Policy) SORBS is listed as source fpr the RBLs. Maybe that should be addressed, since the Link to the Website only leads to the Website of SORBS which says that the service has been Terminated.
