Service rules support source and destination prefix lists as a match condition for stateful firewall, NAT, IDS, and CoS services