questions about creating a DMZ

Hi,

On FGT if you want to have a dmz you can setup Virtual IP and enable port forwarding.

Can you brief me more on your requirement. Do you have internal server that is behind the FGT and needs to be access from outside using public IP?

https://docs.fortinet.com/document/fortigate/5.4.0/cookbook/361386/protecting-a-web-server-with-dmz

You shouldn't just chuck web servers into a DMZ if you want them externally accessible. You should only allow specific ports for the Web servers. if ipv4 then nat port forward web ports to an nginx reverse proxy on the web server or use haproxy to direct the traffic accordingly. You should put the web servers in an isolated vlan and only allow ports necessary to other devices on other vlans required.