The following article fixed the issue. - EXCELENT
https://community.sophos.com/sophos-xg-firewall/f/discussions/129676/sophos-firewall---extremely-poor-bandwidth-when-dos-enabled/483292?focus=true
Unfortunately a Sophos engineer helping us was unaware…