How is traffic routed onto an SSL VPN tunnel from the FortiGate unit side?

A.
A static route must be configured by the administrator using the ssl.root interface as the
outgoing interface.

B.
The FortiGate adds a route based upon the destination address in the SSL VPN firewall
policy.

C.
Assignment of an IP address causes a host route to be added to the FortiGate routing
table.

D.
A route back to the client is automatically created on the FortiGate to match the SSLVPN
IP pool from which the IP address assignment was made.