An administrator needs to strengthen the security for SSL VPN access. Which of the following statements are best practices to do so? (Choose three.)

A. Configure split tunneling for content inspection.
B. Configure host restrictions by IP or MAC address.

C. Configure two-factor authentication using security certificates.

D. Configure SSL offloading to a content processor (FortiASIC).

E. Configure a client integrity check (host-check).