Port configuration is now done in the profile protocol options. HTTPS configurations need to have certificate inspection configured in the firewall policy.
In FortiOS 6.4.0,
set ssl-ssh-profile certificate-inspection must be added in the firewall policy:
config firewall policy edit 1 select srcintf FGT_A:NET_CLIENT select dstintf FGT_A:WAN select srcaddr all select dstaddr all set action accept set schedule always select service ALL set inspection-mode proxy set ssl-ssh-profile certificate-inspection set wanopt enable set wanopt-detection off set wanopt-profile "http" set wanopt-peer FGT_D:HOSTID next end