How allow internal device with a static IP unfiltered access to the internet?

Hi.  I'm at a location that used to have a competitor's content filtering appliance.  In that old device, we had a couple of internal devices whose static IPs were put into an exception list and those devices were then completely unfiltered on the outbound traffic, yet behind the firewall for inbound stuff, complete with port forwarding configurations as required.  This was particularly handy for a couple of other appliances inside the network (e.g. NAS for security cameras, Weatherbug station).

Could someone please help me to accomplish the same thing in the UTM 9.3? 

Thank you!