I will configure your fortigate firewall in this way which protect your critical resources. e.g. web servers, Lan Network, web filter, DDOS prevention. Also Configure SSL/IPsec VPN for remote users, contact Active Directory services with Fortigate Firewall. Application control is also a very good feature in Fortigate