NGFW

[seustache]

Pros and cons in your experience 

[balaji.bandi]

Check the Cisco Point of view

https://www.cisco.com/c/m/en_us/products/security/firewalls/competitive-comparison.html

Gartner point of view

https://www.gartner.com/reviews/market/enterprise-network-firewalls/vendors

[Mohammed al Baqari]

You can use any combination as long as they work correctly.

Simple one

access-l in per ip 10.0.0.0 0.255.255.255 205.0.0.0 0.0.0.255
access-l out per ip 205.0.0.0 0.0.0.255 10.0.0.0 0.255.255.255
!
access-g in interface inside
access-g in interface outside