Chapter 1 What’s New for FortiOS 5.0 : Firewall : Choosing the policy type : Creating a security policy to authenticate users
  
Creating a security policy to authenticate users
Select the Firewall policy type and the User Identity subtype. Select incoming and outgoing interfaces, source addresses, and other features. Then select Create New to add a user authentication rule to the policy.
User authentication rules include destination addresses, user groups and or individual users, a schedule, services, the action, logging settings, and UTM security profiles.
 
You select the destination address separately for each authentication rule. This means that you can apply different features to different user groups depending on their destination addresses.
You can also now add individual users to authentication rules instead of just user groups.
Figure 66: Adding a user authentication rule