A company is deploying a Cisco Secure Web Appliance (SWA) for a group of managed corporate laptops. The security team wants full control over which client traffic goes to the proxy, requires no changes to network infrastructure such as routers or switches, and needs the ability to specify different proxy behavior for different destination URLs (for example, bypassing the proxy for internal SaaS domains). Which traffic redirection method best meets all of these requirements?