When enabled, PBR processes incoming packets after packet validation and firewall action. Packets received by the data plane ingress interfaces for transmission to the egress interface follow the forwarding path listed below. PBR operates on the VRF of the interface that the policy is applied to.