You are configuring the intrusion prevention service (IPS) feature on Cloud Next Generation Firewall Enterprise. You deployed your firewall endpoints and you need to inspect the traffic of the VMs. What should you do?

A. Configure Packet Mirroring to match the source/destination IP addresses of the VMs. B. Configure a firewall rule to match the source/destination IP addresses of the VMs, and use the goto_next action. C. Configure a firewall rule to match the hostnames of the VMs, and use the apply_security_profile_group action. D. Configure a firewall rule to match the source/destination IP addresses of the VMs, and use the apply_security_profile_group action.