I need to create a VPN tunnel to another location, but they only want traffic from site A to access site B, and not allow site B access to their networks. Will adding a deny to the inside interface out allow this to happen? Is there a better way to do this?