A. Create a firewall rule to only allow traffic from the subnet to the internet via a proxy.

B. Configure a proxy policy that blocks all traffic on port 443.

C. Configure a proxy policy that allows only fully qualified domain names needed to communicate to a portal.

D. Create a firewall rule to only allow traffic from the subnet to the internet via port 443.

E. Create a firewall rule to only allow traffic from the subnet to the internet to fully qualified names that are not identified as malicious by the firewall vendor.

F. Configure a proxy policy that blocks only lists of known-bad, fully qualified domain names.