Noticed odd traffic to Canada IPs from FAZ and found they are in use by the FortiGate for the FortiGuard block pages as well as the FortiGuard override pages.
How to close TCP ports 8008 and 8010 on a FortiGate unit
Source: http://itheadaches.com/wtf-fortinet-fortigate-tcp-ports-8008-8010-reserved-ports/