Which action must be taken to permit communication between a bridge group and routed interface on Cisco Secure Firewall?

Defining a source NAT address changes the source IP of traffic but does not, by itself, permit traffic flow between interfaces; an access rule is still essential for the traffic to be allowed and then translated.

Cisco Secure Firewalls operate on a principle of explicit permission, meaning traffic is blocked by default unless an access control rule specifically permits it. Therefore, communication between a bridge group and a routed interface, which represent different logical segments, requires an access rule to define what traffic is allowed to pass between them.

Enabling split tunneling is a VPN feature that controls which traffic goes through the tunnel and which goes directly, and it is unrelated to allowing inter-interface communication within the firewall itself.

While ACLs are components of access rules, simply creating an ACL for a bridge group is an incomplete action; the ACL must be incorporated into an access control policy and applied to allow communication between the interface types.