SSL/SSH Inspection on Private Networks

We have been looking to inspect traffic on private networks (RFC1918, 10/8) using the AWS FortiGate AMI (5.6.4 build 1575) and found that it only works when NAT is enabled.  It is not immediately obvious why this is necessary.  Can anyone shed some light on this?

Many Thanks,

Steve.