Rule without user authentication overriding rules with user authentication FortiOS 5.2

[Jaures]

Hello everyone,

- I have a default firewall rule (rule 1)allowing access to the internet to all connection from the inside interface

on Fortigate 200D with FortiOS 5.0.

- Then i configured Firewall rules with user authentication on top of rule 1, to allow only authenticated users to access the internet. This prevented unauthenticated users from accessing the internet; everything worked fine, until i upgraded the firmware to FortiOS 5.2

- Now, i noticed that unauthenticated users are using rule 1 to access the internet, and when i disable or remove rule 1, even authenticated users can no more access the internet. When rule 1 is enabled, both authenticated and unauthenticated users can access the internet.

- I want to allow only authenticated users to have access to internet, and get rid of rule 1.

 Any help is urgently needed.

Thank you

Jaures.