fortiweb passing normal traffic?

Yes, you can. By default Fortiweb blocks all non HTTP traffic, but you can change it as described here, pay attention that such non-HTTP traffic passes unfiltered/uninspected by the Fortiweb, so make sure to protect it in other ways - Fortigate etc:
https://community.fortinet.com/t5/FortiWeb/Technical-Note-How-to-route-non-HTTP-HTTPS-traffic-destined-to/ta-p/195142