Logging from FGT to FMG - "Denied configuration on Fortimanager/Fortianalyser"

Hi Guys,

I've recently configured a customers FGT-300D to send its logs to its Fortimanager (VM), however, no logs are being received and when I "test connectivity" I get the error "Denied configuration on Fortimanager/Fortianalyser."

I've enabled the FAZ functions on this FMG and the firewall shows the FGT as a "logging device" as I would expect.  Maybe I'm missing something obvious!? 

For reference, the FGT is running 5.2.6 and the FMG 5.2.4. I know historically that the FMG should be running the same code or higher, but the release notes seem to state that this configuration is supported.  Any ideas?

Many Thanks,

Steve