Based on the provided SDWAN topology and route configuration, to steer VPN 1 traffic from sites 101 and 103 through the firewall at site 102, how must the centralized route policy be applied?

Applying the route policy outbound toward sites 101 and 103 means the vSmart controller modifies OMP route advertisements sent to those sites, injecting service-node (firewall) information so that sites 101 and 103 send VPN 1 traffic to site 102 for firewall inspection before reaching the destination.

Inbound toward sites 101 and 103 means the policy processes routes those sites advertise into the vSmart, affecting what the vSmart stores rather than what routing information the sites receive.

Applying the policy outbound toward site 102 modifies routes sent to the firewall hub, not the routes that sites 101 and 103 use to forward traffic, so service insertion at 102 would not be triggered.

Inbound toward site 102 processes routes advertised by the firewall site into the vSmart and has no effect on how sites 101 and 103 route their traffic.