Direction is incoming with relation to Fortigate. You can see it is
LAN->WAN so something on the user's computer was destined for port 443
on host. There are open nodes on the psiphon network that doesnt require
client software to be loaded.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.