Explanation Although the statement "permit tcp any any gt ... lt ..." seems to be correct but in fact it is not. Each ACL statement only supports either "gt" or "lt" but not both: In fact answer 'Permit tcp any any range 22 443 Deny tcp any any eq 80 eq 80.