VPN dial up

must use if fortigate behind nat either public ip or private ip

from the log source is fortigate public ip
and remote ip is gateway fortigate public ip , means isp do nat or have mikrotik