A network engineer is configuring a site-to-site IPsec VPN between two corporate data centers using IKEv1 with pre-shared key authentication. Both gateways have static, well-known public IP addresses. During a security review, an auditor flags that the tunnel is configured to use IKE Aggressive Mode. What is the primary security concern the auditor is raising, and what is the appropriate remediation?