We were wondering the same thing and found that in version 7.0 the FortiGate does not respond to requests (SYN packet is not answered).
Prerequisite is that all "Trusted Hosts" are set!
In version 7.2 the behavior is different. There the Web GUI answers also if all "Trusted Hosts" are set. There it is mandatory to work with loca-in policies.
- Have you found a solution? Then give your helper a "Like" and mark the solution.