Quick Answer

The correct answer is to configure an explicit web proxy and create a proxy policy. This is required because an explicit web proxy operates as an intermediary that listens on a dedicated IP and port, typically 8080, requiring client browsers to be manually configured to send their requests to that proxy address. The proxy policy then defines which traffic matches the proxy session and applies content filtering rules, ensuring all internal-to-internet traffic is inspected. On the Fortinet NSE 4 Network Security Professional exam, this scenario tests your understanding of the distinction between explicit and transparent proxy modes—a common trap is confusing the two, as transparent proxies require no client configuration but rely on policy-based forwarding. Remember that explicit equals explicit client setup, while transparent is invisible to the user. A helpful memory tip: "Explicit means the client points to it; transparent means the FortiGate intercepts it."