An engineer configures a one-armed policy-based redirect service Insertion for an unmanaged firewall. The engineer configures these Cisco ACI objects: - a contract named All_Traffic_Allowed - a Layer

A policy-based redirect subject is a component of a PBR policy, but it does not orchestrate the entire service insertion and traffic redirection workflow, which requires a service graph.

A firewall bridge domain might be part of the firewall's network configuration or its ACI integration, but it does not directly configure the traffic redirection logic.

A device interface policy configures properties of interfaces on the L4-L7 service device, but it does not define how traffic is redirected to that device for service insertion.

A service graph in Cisco ACI is used to chain a contract with a service device like a firewall and apply specific service policies, including policy-based redirect. It defines the complete traffic flow and redirection path through the L4-L7 service device, making it essential for service insertion.