You mentioned the FortiAnalyzer attempting to communicate directly with
servers. Have you reviewed the firewall logs to see if there are any
blocked connections to the license servers?
Enable User-based Traffic Monitoring: In FortiGate, go to Monitor >
Traffic > Traffic Log. Enable "Enable User-based Traffic Monitoring"
under the "Display Options" section. This will allow you to track
traffic usage for each user.Analyze User Traffi...