Fortinet fortigate-50r Installationsanweisungen

If you want users to authenticate to use other services (for example POP3 or IMAP) 
you can create a service group that includes the services for which you want to 
require authentication as well as HTTP, Telnet, and FTP. Then users could 
authenticate with the policy using HTTP, Telnet, or FTP before using the other service. 

In most cases you should make sure that users can use DNS through the firewall 
without authentication. If DNS is not available users cannot connect to a web, FTP, or 
Telnet server using a domain name.

Enable antivirus protection and web filter content filtering for traffic controlled by this 
policy. You can select Anti-Virus & Web filter if Service is set to ANY, HTTP, SMTP, 
POP3, IMAP, or FTP or to a service group that includes the HTTP, SMTP, POP3, 
IMAP, or FTP services.

Select a content profile to configure how antivirus protection and content filtering is 
applied to the policy. See