sophos xg firewaLL ON DEDICATED HOST

Do you have to do this like this? IP addresses with /32 and a Default GW outside of the Netmask? 

Can you ask your Provider to get a /XX with a Gateway within the Netmask? 

on UTM no issue with 

it's a ipfailover with /32 and gateway on the physical host.

they don't give me a /XX with a Gateway within the Netmask and they can't

Then you need to use this IP without Zone WAN. 

Select this IP as a normal DMZ interface. Create a Static route 0.0.0.0 for this interface. 

XG cannot have a WAN Interface like that. 

I can configure a interface on wan zone on XG.

I did that before and configure a static route 0.0.0.0  and a second route with my gateway on the physicyl host 195.x.x.x and add interface for wan.

But i had lot of ARP request and the provider block my ip

with UTM and the screen config I don't have any issue

Shouldnt XG prevent such configuration? Because XG will generate a lot of ARP requests for everybody. 

From my perspective such setups are bad practice anyways. Those Point to Point Links are likely to forward all ARP Requests to the next End.

You are configuring a Point to Point connection without knowing, you are doing this. And XG will still generate all the ARPs, it needs to communicate. 

Shouldnt XG prevent such configuration? Because XG will generate a lot of ARP requests for everybody. 

From my perspective such setups are bad practice anyways. Those Point to Point Links are likely to forward all ARP Requests to the next End.

You are configuring a Point to Point connection without knowing, you are doing this. And XG will still generate all the ARPs, it needs to communicate. 

I did this

In setup > Network > Interfaces :

setup the WAN interface (PORTB by defaut) with :

ip : 212.x.x.x/24

gw : 212.x.x.x.254 (don't think just apply that, i know it does'nt feel right)

In setup > routing >static routing :

you'll add 2 routes:

- 195.x.x..0/24 - leave GW empty - select WAN interface (PORTB)

- 0.0.0.0/0 - GW 195.x.x.1 - leave interface empty

but when I apply this all was ok for 1 days after the ip was blocked

Because you did not configure it as the provider require it. 

You need to use /32 not /24. 

You cannot simply put a gateway in it. 

Use a DMZ interface and use /32. The 0.0.0.0 should be enough, point it to the PortB. 

I will try this