SSO Groups Not Accessible via UI in FOSv6 for SSL-VPN Interface
Adding FSSO groups in firewall policies via UI is not available when the policy’s source interface is set to SSL-VPN.
Workaround: Configure VPN firewall policy from CLI.
config firewall policy
edit <firewall-policy-ID>
unset srcint
set group <fsso group>
set srcint ssl.<vdom>
end