Cisco WAN :: 3560 Switch Configuration - Setting Up As Edge Router

I have a cisco 3560 switch set up as my edge router.  It is working as my external demarc switch and edge router.  It is sitting between the ISP's switch and my ASA firewall.  It's a very basic configuration with port 1 set up with a fixed ip and switchport turned off which is connected to the ISP switch.  VLAN2 is configured with an IP address and 3 ports, two of which go to different firewalls.
 
I found that I cannot ping a specific address from the inside interface (VLAN2), but I can from the outside interface Gig0/1.  I have a few deny commands in an access list, but they don't apply to the network i'm trying to access, and I haven't had any other inaccessible networks otherwise. 
 
Here's my config minus passwords and full IP ranges.  There are two ranges, one with xxx and one with xx.  The xxx is set as secondary, but is the one we really use.
 
Current configuration : 4808 bytes!version 12.2no service padservice timestamps debug uptimeservice timestamps log uptimeservice password-encryption!hostname my-rtr-ext!boot-start-markerboot-end-marker!enable secret 5 !
!!no aaa new-modelsystem mtu routing 1500ip routing! 
[Code] ............