beginning with version 5.3, the pix firewall uses access lists to control connections between inside and outside networks. access lists are implemented with the access-list and access-group commands. these commands are used instead of the conduit and outbound commands, which were used in earlier versions of pix firewall, and which are maintained in current versions for backward compatibility.

    you can use access lists to control connections based on source address, destination address, or protocol.configure access lists carefully to allow the minimum access required. when possible, make access lists more restrictive by specifying a remote source address, local destination address, and protocol. the access-list and access-group command statements take precedence over the conduit and outbound command statements in your configuration.