italk(IT)

If policy of your organization is not allow user to using internet fortigate firewall can support your organization policy. you config that on policy firewall and apply schedule object to policy that allow client access to the internet.

When you create user or group user you can apply user or group user on policy firewall. Example 1. Users on IT department access to all server on DMZ zone but users on accounting department should be access specific server that relate with accounting department. you can create 2 policy for IT users and accounting users by using local user and group user Example 2. Users and group user can use on captive portal