Disable acces to sites of my network

You don't really need to because everything that is not explicitely allowed on a Fortigate is implicitely denied :) So it's vice versa - if you want to be able to access one of your lans (or a host in there) you will need policies and/or vip.