One side of a stateful inspection appliance sees traffic, but return packets take another route. What is the likely concern?

1. Asymmetric routing can prevent the appliance from maintaining valid connection state.
2. The appliance's cost tag is too long.
3. DNS TTL directly controls all return-route selection.
4. The two endpoints use different display names.