CBS350 ACL question for TCP connections

[ryan14]

What is the equivalent of the permit tcp any any established for the CBS350 acl? I want to allow outbound traffic to a vlan that has an inbound acl blocking traffic to internal hosts.

I'm guessing it is something like this?

permit tcp any any any any match-all +syn+ack ace-priority 1

[Karsten Iwen]

I don't think that it will work on this device. You would also need "only Ack" for all packets after the 3-way handshake and RST if the server refuses the connection., RST and FIN would be needed for connection teardown.