A. Create a custom Service object for port 443 and use it in the Security policy rule instead of the default 'service-https'.

B. Define a custom App-ID signature based on unique characteristics of the application's traffic (e.g., specific HTTP headers, URL patterns), and use this custom App-ID in Security Policy rules.

C. Modify the default 'web-browsing' App-ID signature to exclude traffic to the internal application's IP address.

D. Use a URL Filtering profile to categorize the internal application's URL and apply policy based on that category.

E. Enable SSL Inbound Inspection for the internal application server and rely on Content-ID to differentiate the traffic.