If I'm looking for a filter that is allowing web browsing without a proxy
set at the w/s, what protocol and port must this filter allow? I assume
it's source=private or any, destination = public or any, protocol TCP, port
80, and destination address has to be Any.

Please let me know if that's right or how it's wrong.