300-620 DCACI: Implementing Cisco Application Centric Infrastructure

PBR in L3Out permits a Layer 3 PBR destination to be located in an L3Out, enabling the same firewall interfaces used for north-south L3Out traffic inspection to also inspect east-west traffic. Cisco documents this as the solution for firewall interfaces connected through an L3Out, a design supported beginning with APIC Release 5.2.