We are setting up a VPN tunnel with a vendor and I want to only allow Pings, and one specific port. I thought you could do that through the crypto map on the ASA 5510 but it looks like it has to allow all IP traffic and then you filter out using a VP...