 Access-control lists can generally be configured to control both inbound and outbound traffic, and in this context they are similar to firewalls.Like firewalls, ACLs could be subject to security regulations and standards such as PCI DSS.ACL algorithms have been ported to SQL and to relational database systems.