I've been trying to solve the problem of a single VLAN in our org needing a different route than the rest of the traffic on the core switch. It goes to a different firewall to keep things separated. In my research, I keep coming back around to Policy...