Chapter 15 Unified Threat Management for FortiOS 5.0 : Other Security Profiles considerations : Profile Groups : Creating a new group : Adding a Profile Group to a policy
  
Adding a Profile Group to a policy
Using the CLI
1. Go to the Firewall policy that you wish to associate the Profile Group
a. For an Address Firewall policy:
config firewall policy
edit <policyID>
b. For an Identity based policy
config firewall policy
edit <policyID>
config identity-based-policy
edit <policy_id>
2. To assign a Profile Group to a security policy the following additional settings need to be added to the policy configuration.
set utm-status enable
set profile-type group
set profile-group <name of the profile group>
end