Use NGFW mode in FortiGate, that will match like a Palo. However, I
think largely the concerns here are over blown, it just requires a
different way of thinking about your rules in profile mode. People are
mentioning exceptions well, what makes an ex...