# sh run access-group
access-group acl_outside in interface outside
access-list acl_outside line 1 deny ip host X.Y.Z.W any