Microsoft Direct Access ACL

Hi,

I am trying to implement Microsoft Direct Access with single NIC behind the firewall.

I am using Microsoft's following article,

https://docs.microsoft.com/en-us/windows-server/remote/remote-access/directaccess/single-server-advanced/da-adv-configure-s1-infrastructure

Can someone please help we with defining ACL for this.

I am using Fortigate 61F