To disable inbound aggressive mode connections on ASA, go to Configuration -> Site-to-Site VPN -> Advanced -> IKE Parameters in ASDM:
To disable it on the cli do the following:
crypto ikev1 am-disable