Click the Exhibit button.
Only users authenticated in FortiGate-B can reach the server. A customer wants to deploy a single sign-on solution for IPsec VPN users. Once a user is connected and authenticated to the VPN in FortiGate-A, the user does not need to authenticate again in FortiGate "”B to reach the server. Which two actions satisfy this requirement? (Choose two.)
A. Use Kerberos authentication.
B. FortiGate-A must generate a RADIUS accounting packet.
C. Use FortiAuthenticator.
D. Use the Collector Agent.