Refer to Exhibit. A firewall has three PBF rules and a default route with a next hop of 172.20.10.1 that is configured in the default VR. A user named Will has a PC with a 192.168.10.10 IP address…

This next hop would only be used if there was a PBF rule explicitly defining it for this specific traffic, and that rule was matched and applied.

This next hop would only be used if there was a PBF rule explicitly defining it for this specific traffic, and that rule was matched and applied.

Policy-Based Forwarding (PBF) rules are evaluated before the routing table. If a PBF rule is configured to match traffic from source 192.168.10.10, to destination 172.16.10.20, with the HTTPS application, and specifies a next hop of 172.20.20.1, that rule will take precedence, overriding the default route for this specific traffic.

The default route (172.20.10.1) in the default Virtual Router is only used as a last resort if no more specific PBF rule or static route matches the traffic. PBF rules are designed to override standard routing decisions.