Hi Mohammedzwali,
From your description, the design of the network should be the VRRP + M-LAG.
For the uplink side, the switches enable M-LAG to connect to the firewall, and downstream link, the VRRP is enabled to provide the gateway redundancy.
Please refer to the picture below:
