FortiOS 5.6 Beta 3 was released. They are steadily improving upon it. There are some glaring bugs (for instance, if you are running in NGFW policy mode and put a deny for certain web categories at the very top…..it kills all traffic below it too, even if there is an allow). That is going to come with the territory though as they adjust how their system approaches a packet.

Either way, progress is being made and I am very excited about where this version of code is going. I think 5.6 will genuinely be able to shut Palo Alto Networks up when it comes to their marketing of how the policies differ.