While it supports ACLs, I was never able to understand how to make them work other than for extremely simple things. There is essentially no documentation for the ACLs in SwOS. See Is there any SwOS ACL documentation with example?
SwOS can’t initiate outbound tcp connections. There is no default gateway. It just hijacks the request packet tcp/ip headers and swaps src and dst ip addresses, mac addresses, and ports. It makes it easy to configure, but it is one of the reasons that updating the firmware requires assistance from a PC browser that is the initiator.