Links:
Cisco Security Appliance CLI Configuration Guide, Version 7.0 – Permitting or Denying Network Access