FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
The Citrix WinFrame/MetaFrame service requires the use of TCP port 1494 (default value) for the ICA client. There is a pre-defined Service on the FortiGate, called "WinFrame" that you can use for this purpose, when creating the Firewall Policy.
For further details on ports used with Citrix services, see the following link:
