An IT security analyst is investigating a series of unusual outbound data transfer patterns detected by FortiAnalyzer. The logs indicate a potential exfiltration of sensitive information, originating from a segment of the internal network managed by a FortiGate firewall. To effectively address this, the analyst needs to pinpoint the exact FortiGate security policy that either permitted or failed to prevent this anomalous traffic. Which specific FortiAnalyzer feature is most critical for correlating these detected anomalies with the underlying FortiGate policy configurations to facilitate this investigation?