A township steers client-to-server traffic toward an inspection service with FBF but leaves the return path on the normal tenant instance. What pitfall should the designer anticipate?
Select an answer to reveal the explanation.
Short Explanation
Steering only half the conversation is like sending the outbound truck through security and letting the reply sneak in the back gate. Stateful boxes and return routing get confused. Plan both directions when you care about inspection symmetry.
Full Explanation
Filter-based forwarding is directional based on where filters and actions are applied. Steering only one direction toward an inspection instance can produce asymmetric forwarding that undermines stateful security devices and complicates troubleshooting. EVPN does not implicitly reverse FBF policy, and VXLAN does not eliminate the need to consider bidirectional path design for steered services.