Fortinet FortiGate 1U Quick Start Manual page 71

Creating security policies
Go to Policy > Policy > Policy.
Create a security policy to allow HTTP and
HTTPS traffic from the Internet to the DMZ
interface and the web server.
Create a second security policy to allow
HTTP and HTTPS traffic from the internal
network to the DMZ interface and the web
server.
Adding this policy allows traffic to pass
directly from the internal interface to the DMZ
interface.
Protecting a web server on the DMZ network 51