[tptacek]

This isn't an ACL setting. You have to specifically ask an ASA to bind SNMP to the external interface.