They can track both TCP and UDP flows.

They can be created in either ingress or egress directions.

A packet in the direction of the stateful ACL rules will automatically create a “related” rule in the reverse direction.

The automatically created rules will not go away until the ACL is manually deactivated and reactivated.