Thomas is the Security Administrator for an online bookstore. Customers connect to a variety of Web servers to place orders, change orders, and check the status of their orders.
Thomas checked every box in the Web Intelligence tab, and installed the Security Policy. He ran penetration test through the Security Gateway, to determine if the Web servers were protected from cross-site scripting attacks. The penetration testing indicated the Web servers were still vulnerable.
Which of the following might correct the problem?

A.
The penetration software Thomas is using is malfunctioning and is reporting a false-positive.

B.
Thomas must create resource objects, and use them in the rules allowing HTTP traffic to the Web servers.

C.
Thomas needs to check the "Products > Web Server" box on the host node objects representing his Web servers.

D.
Thomas needs to check the "Web Intelligence" box in the SmartDefense > HTTP properties.

E.
Thomas needs to configure the Security Gateway protecting the Web servers as a Web server.