asa5520(config)# access-list OUTSIDE_IN_ACL permit icmp any any echo-reply
asa5520(config)# access-group OUTSIDE_IN_ACL in interface outside