How should you configure the VPN match rule?

You want VPN traffic to match packets from internal interfaces. You also want the traffic to exit the Security Gateway, bound for all sitetosite VPN Communities, including Remote Access Communities. How should you configure the VPN match rule?

A.
Internal_clear> All_GwToGw

B.
Communities > Communities

C.
Internal_clear> External_Clear

D.
Internal_clear> Communities

E.
Internal_clear>All_communities