Which three criteria can a FortiGate device use to look for a matching firewall policy to process traffic? (Choose three.)