Restrict traffic for specific app only on port 443

Looking for some advice on if a Foritgate 80D or 100D can do the query below? 

Can you tell fortigate firewall to permit traffic on a specific app only (Citrix) going out on port 443 go to a set list of IP Addresses?  But also allow any traffic going out port 443 via a web browser.

Im not sure its possible as I knwo you can block ports on most routers but not for specific apps?