As of FortiOS 6.4.3, match-vip is not allowed in firewall policies when the action is set to accept.
match-vip