Fortigate 7.2 policy ipsec packet capture

Is there any way to get a pcap/packet capture from a fortigate for a policy based ipsec vpn or vpn concentrator?

Without being able to select an interface in the diagnostic menu it appears that there is no way to get a pcap off of the system.