Router&Switch use udp high port(start with udp 33434) for traceroute ,
Windows use icmp request to do this, Fortigate will deny udp traffic
tarwards to interface. I think it's will be working if you use windows
PC or use linux and use tracerotue -I