In an IPSec gateway-to-gateway configuration, two FortiGate units create a VPN tunnel
between two separate private networks. Which of the following configuration steps must be
performed on both FortiGate units to support this configuration? (Select all that apply.)

A.
Define the Phase 1 parameters that the FortiGate unit needs to authenticate the remote
peers.

B.
Create firewall policies to control traffic between the IP source and destination address.

C.
Configure the appropriate user groups on the FortiGate units to allow users access to the
IPSec VPN connection.

D. Define the Phase 2 parameters that the FortiGate unit needs to create a VPN tunnel with
the remote peer.

E.
Set the operating mode of the FortiGate unit to IPSec VPN mode.