You can use Unicast Reverse Path Forwarding (URPF) on inbound interfaces of the FW to protect a network from the source address spoofing attack.