This has been the behavior of IOS for a very long time (I think I saw it in 10.0) and is an exception to the rule that when you add a line in an access list that the new line goes to the bottom of the list. This exception is on standard access lists and not extended access lists and it will take any new line that specifies a host (/32) match and moves it above any subnet/network match.
As far as I know it does not harm anything. But it is a bit surprising to see the different behavior.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...