Refer to the exhibit.

To redirect HTTP traffic between an EPG client and EPG server through a Cisco ASA firewall in a Cisco ACI environment, a contract filter must be configured to allow both ARP and HTTP. ARP is essential for IP to MAC address resolution, which is necessary for layer 2 communications within the same subnet or across subnets when routing is involved. The HTTP filter ensures that only HTTP traffic is redirected to the firewall for inspection or policy enforcement. References: Implementing Cisco Application Centric Infrastructure Official Cert Guide