Does anyone know if CSS ACL's are stateful connections once a flow has been created ? eg If i make a connection which looks at the acl clause and i am permitted (which creates a flow) are subsequent packets checked at acl's or does it use the flow therfore bypassing the acl.