what other configuration must be done to allow the traffic to reach the Web server?

A Web server behind the Security Gateway is set to Automatic Static NAT. Client side NAT is not
checked in the Global Properties. A client on the Internet initiates a session to the Web Server.
Assuming there is a rule allowing this traffic, what other configuration must be done to allow the
traffic to reach the Web server?

A.
Automatic ARP must be unchecked in the Global Properties.
B. Nothing else must be configured.

C.
A static route must be added on the Security Gateway to the internal host.

D.
A static route for the NAT IP must be added to the Gateway’s upstream router.