Fixed Cisco ASA firewalls patterns for outbound and inbound directions

There is a problem with the built-in patterns for Cisco ASA firewalls. When the direction is "outbound", the src_ip/src_port and dst_ip/dst_port are reversed. This PR fixes this.
The Logstash Cookbook should be updated for this purpose, see #1369.

I agree that this needs to be changed, but it looks like you have a typo in your implementation.

Similar to ICMP messages, these logs are talking about `between <local> and <remote>`, so:

An *incoming* SA would be `between %{IP:dst_ip} and %{IP:src_ip}`
an *outgoing* SA would be `between %{IP:src_ip} and %{IP:dst_ip}`