You can create identity-based policies based on FSSO groups as you do for local user groups. For more information about security policies see the Firewall chapter.