You got the first half right, yeah, assign a nic to a bridge vmbrX in the network settings of the proxmox node, then in the hardware page for the Sophos VM, assign as many virtual network cards as you need, with the VirtIO driver, and connect that to the bridge like so:
In this case, Proxmox...