FortiGate uses multiple criteria to match traffic against firewall policies. The three key criteria are: source addresses (which can be defined as Internet Services), destination addresses (which can also be defined as Internet Services), and services/protocols defined in the policy. These criteria form the basic matching elements that determine which policy will process specific traffic. FortiGate evaluates policies sequentially from top to bottom in the policy list, not by priority values or policy ID numbers.

C. FortiGate does not use priority values for policy matching; it uses top-to-bottom order in the policy list.

E. Policy ID numbers are for identification only, not for determining processing order.

1. Fortinet NSE4 Study Guide - FortiGate Security 7.2, Chapter 3: Firewall Policies, Section 3.2: Policy Lookup, Pages 45-48

2. FortiGate Administration Guide 7.2, "Firewall Policy Components", Document ID: FG-702-ADMIN, Section 2.3, Pages 112-115

3. Fortinet Knowledge Base Article: "How FortiGate processes firewall policies", Document KB-FGT-2021-0234, Paragraphs 3-5

4. FortiGate Security Best Practices Guide 7.2, "Policy Configuration Guidelines", Section 4.1, Pages 67-69

5. Fortinet Technical Documentation: "FortiOS 7.2 CLI Reference", Command: config firewall policy, Pages 234-237