When browsing to an internal web server using a web-mode SSL VPN bookmark, from which of the following source IP addresses would the web server consider the HTTP request to be initiated?

Virtual IP addresses are typically used for incoming traffic to map public IPs to internal IPs, not as source IPs for proxied connections in web-mode SSL VPN.

In web-mode SSL VPN, the FortiGate unit acts as a proxy; it receives the user's request, decrypts it, and then initiates a new connection to the internal web server on behalf of the user, using its own internal interface's IP address as the source.

The remote user's public IP address is the initial source for the SSL VPN connection to the FortiGate but is masked by the FortiGate when proxied to the internal server in web-mode.

The FortiGate unit's external IP address is used for the client's connection to the FortiGate but not for the subsequent proxied connection from the FortiGate to the internal network.