WAN FAILOVER DUAL CONNECTION

I have a Sophos UTM9 cluster where each firewall is connected to two different ISPs (let’s call them WAN1 for Provider A and WAN2 for Provider B). Let’s name the interfaces 1-2 (node 1) and 3-4 (node 2...
HowTo: Block IoT scanners like Shodan, Censys, Shadowserver, PAN Expanse etc.

They getting more and more a problem. how can i block those networks via utm 9 ?