How should you configure the VPN match rule?

You want VPN traffic to match packets from internal interfaces. You also want the traffic to exit the Security Gateway, bound for all site-to-site VPN Communities, including Remote Access Communities. How should you configure the VPN match rule?

A.
internal_clear > All_GwToGw

B.
Communities > Communities

C.
Internal_clear > External_Clear

D.
Internal_clear > Communities

E.
internal_clear > All_communities