Which statement about NAT table evaluation in the ASA in true?