which traffic can pass through a Cisco ASA that is operating in transparent mode without explicitly allowing it using an ACL?