Modify Sophos XG Firewall Message Source

he @PCTS
you might want to add a rule in your processing that sets the source to the sending device? Or you can identify in some other way the source and use that information to set this?

You write that you have the device ID - so create a rule that if device ID is A than set the source to A or something similar.

could it be that you double post?