You want VPN traffic to match packets from internal interfaces. You also want the traffic to exit the Security Gateway, bound for all site-to-site VPN Communities, including Remote Access Communities. How should you configure the VPN match rule?

A.
internal_clear > All_GwToGw

B.
Communities > Communities

C.
Internal_clear > External_Clear

D.
Internal_clear > Communities

E.
internal_clear > All_communities