Logging from FGT to FMG - "Denied configuration on Fortimanager/Fortianalyser"

[watso]

Hi Guys,

I've recently configured a customers FGT-300D to send its logs to its Fortimanager (VM), however, no logs are being received and when I "test connectivity" I get the error "Denied configuration on Fortimanager/Fortianalyser."

I've enabled the FAZ functions on this FMG and the firewall shows the FGT as a "logging device" as I would expect.  Maybe I'm missing something obvious!? 

For reference, the FGT is running 5.2.6 and the FMG 5.2.4. I know historically that the FMG should be running the same code or higher, but the release notes seem to state that this configuration is supported.  Any ideas?

Many Thanks,

Steve

[scao_FTNT]

in FMG device manager, right click to edit that FGT device, is log permission enabled?

Thanks

Simon