Fortinet FORTIOS V3.0 MR7 User Manual page 58

Granting unique access permissions for SSL VPN tunnel user groups Configuring a FortiGate SSL VPN
Figure 17: Source/destination firewall addresses - Public IP
Figure 18: Source/destination firewall addresses - Linux/Windows PC
After creating the source and destination addresses, go to Firewall > Policy to
create the firewall policies.
The policy for user1 is an SSL-VPN firewall policy that includes the applicable
source and destination addresses, and has group1 as the user group attached to
the policy.
FortiOS v3.0 MR7 SSL VPN User Guide
58 01-30007-0348-20080718