A company uses hub-and-spoke networking and wants centralized inspection of spoke-to-spoke traffic. Which design is necessary?

1. Route the relevant spoke prefixes through the hub's inspection appliance with forwarding configured
2. Assume every hub peering automatically inspects all traffic
3. Replace private routing with public DNS records only
4. Give every spoke overlapping address ranges