Chapter 16 SSL VPN for FortiOS 5.0 : Basic Configuration : User accounts and groups : Authentication of remote users : NSA Suite B cryptography support
  
NSA Suite B cryptography support
FortiOS supports the use of ECDSA Local Certificates for SSL VPN Suite B. The National Security Agency (NSA) developed Suite B algorithms in 2005 to serve as a cryptographic base for both classified and unclassified information at an interoperable level.
FortiOS allows you to import, generate, and use ECDSA certificates defined by the Suite B cryptography set. To generate ECDSA certificates, use the following command in the CLI:
exec vpn certificate local generate ec
See Also
• Authentication of remote users
• Allow one time login per user
• Setting the client authentication timeout