are you sure the tunnel is up completely? Green in FGT Ipsec Monitor only means that phase1 has come up.
diag vpn tunnel list on cli will show you if is completely up.
If it shows phase2 name somewhere and a "sa=1" behind it it is up.
ALso could be something with ike. Look at my "strange ipsec vpn behavior " thread below for further details.