Which option is most effective at preventing a remote access VPN user from bypassing the corporate transparent web proxy?