Which policy allows communication between TLOCs of data centers and spokes and blocks communication between spokes?

A centralized data policy primarily focuses on traffic engineering, QoS, and application-aware routing for data packets, not on defining the fundamental routing reachability between TLOCs.

A localized control policy is applied to a single WAN Edge router and affects routing decisions only for that specific device, unable to enforce communication rules across the entire fabric between different site types.

A centralized control policy, configured on the vSmart controller, is responsible for influencing the network topology and routing decisions across the entire SD-WAN overlay. It can be used to define specific routing relationships, such as allowing TLOCs from data centers to communicate with spoke TLOCs while explicitly blocking TLOC communication directly between spoke sites, thereby controlling the overall reachability and traffic flow at a control plane level.

A localized data policy is applied to a single WAN Edge router and affects data plane forwarding decisions only for that device, unable to enforce communication rules across the entire fabric between different site types.