Esiste un vantaggio in termini di prestazioni quando si utilizza la parola chiave dell'elenco di accesso IP stabilita su un ACL esteso? Fa uso “stabilito” rendere l'elenco di accesso più vulnerabile? Hai esempi specifici di utilizzo?

There is no real performance advantage. The keyword establishedsimply means that packets with the acknowledgment (ACK) or reset (RST) bits set are let through. To learn more about ACLs in general, refer to Configuring IP Access Lists.

The establishedkeyword allows the internal hosts to make external TCP connections and to receive the return control traffic. In most scenarios, this type of ACL would be essential on a firewall configuration. The same result can also be achieved either by using Reflexive ACLs or Context-Based Access Control. Refer to Configuring Commonly Used IP ACLsfor some sample configurations.