Unable to ping the other site of IPsec VPN LAN IP?

Two Fortigates are setup with site to site IPsec VPN, but it is not pingtable to each others within LAN client PC, why?
Found out that the Internal to Wan1 policy with "IPsec" have to move on top of the policy all to all with "Accept".