I use a website every day which never broke any of Fortinet's rules, but they set it as Phishing, even though it is not.