sophos firewall HA with spine leaf core

Dear All,

I'm configuring the below topology, and I am facing some challenges.

Spine-1 and spine-2 are connected with Sophos firewall1-2 

SVI are created in Spine-1 and Spine-2 

FW-1 and FW-2 will be in active & passive mode Spine-1 and Spine-2 will be in active-active mode

only internet traffic & other zone traffic will reach the firewall.

what is the suggested way to configure this topology on the firewall side  

Spine1 port-47,48 spine2 port-47,48 and firewall A1, A2 what needs to configure?

Which routing protocol will be used for the topology below?

in ha which ports need to monitor?

I read all KB articles and all videos not getting a proper solution.