For a stronger authentication, you can also enable extended authentication (XAuth) to request the remote peer to provide a username and password.

FortiGate supports pre-shared key and signature as authentication methods.

Enabling XAuth results in a faster authentication because fewer packets are exchanged.

A certificate is not required on the remote peer when you set the signature as the authentication method.