Which two statements about SSL VPN between two FortiGate devices are true? (Choose two.)

Which two statements about SSL VPN between two FortiGate devices are true? (Choose two.)

A. The client FortiGate requires a client certificate signed by the CA on the server FortiGate. B. The client FortiGate requires a manually added route to remote subnets. C. The client FortiGate uses the SSL VPN tunnel interface type to connect SSL VPN. D. Server FortiGate requires a CA certificate to verify the client FortiGate certificate.