Changes since SOA version
IXFR is a zone transfer request that returns changes since a specific SOA version. Enter the SOA version to request changes since then.
Not an apex domain
The domain cd-euc1.prod.hydra.sophos.com is not the root of its zone.
Instead, try zone transfer on prod.hydra.sophos.com .
Instead, try zone transfer on prod.hydra.sophos.com .