Which of the following statements are best practices for troubleshooting FSSO? (Choose two.)

Including the group of guest users in a policy is a best practice as FSSO relies on user groups to apply security policies; if guest users are not part of an FSSO-monitored group, they won't be authenticated by FSSO.

Extending timeout timers might mask an underlying connectivity or performance issue rather than troubleshoot its root cause.

A specific bandwidth guarantee of 34 Kbps for FSSO communication is not a documented or standard best practice; FSSO performance relies more on low latency and sufficient general network capacity.

FortiGate Single Sign-On (FSSO) requires specific ports to be open for communication between the FortiGate, FSSO agents, and domain controllers, so ensuring all firewalls allow these ports is crucial for FSSO functionality and troubleshooting connectivity issues.