Sorry to hijack the thread. I'm trying to allow FTP traffic from a specific device on the DMZ interface to a specific host on the Internal interface. I used the policy route with the following settings
Route Type (Interface route)
Source Interface (Any)
Source Network (Any)
Service (FTP)
Destination Network (Any)
Target Interface (Internal)