Which statement about NAT table evaluation in the ASA is true?