We have a 3rd party PC that is required to be on our network so they can have internet access but we do not want them to have access to anything else. This machine is at a remote site that is connected via 10meg metro-e circuit. Here is the data path.
PC -> Default Gateway [local catalyst switch] -> Catalyst Switch [@main office]-> Cisco Router [main default gateway] -> Cisco ASA -> Internet.
I know how to create an ACL but I am unsure what I should add to only allow access from this PC to the internet.