Rule tuning from fortinet/proftp/windows-auth