Sophos XG Business Application Rule: Is it possible to pass the Source IP from Client to internal Web Server for Geolocation usage?

We have a very complex Webserver behind the Firewall who uses Geolocation for different Content-presenting according from which Country the Client connects. I know the function of X_Forwarded_FOR, but this can very easy be spoofed as we checked. We need the original Client IP passed through the Firewall.

Thanks,

Horst