CTAP, one arm sniffer mode

Hi,

Does anyone know if I would be able to set up a fortigate as a one arm sniffer at a customer site - with no connection to anything else (no analyzer).

Collect data for 2 days, and then bring it back "home" and have it connected to my fortianalyzer and run a report ? A ctap report for example.