The current protocol definition is limited to a single port for the primary connection. This pose sometimes a great problem because some applications (i.e. banking applications with SSL/TLS) use a range of TCP ports for the primary connection (i.e. TCP port 7000 - 7099).
I think it might be better that there is a possibility to also define a port range for the primary connection. As a site effect, it helps also to define a more liberal outbound policy (i.e. all outbound TCP) which is sometimes needed, but still more restrictive than all IP.
it sounds to me that you also created all the Isabel protocols. BTW, in the new version there are 3 less (yes, they always change all the ports in a new version).
Danny
[ June 30, 2002, 01:39 AM: Message edited by: Danny ]
you don't have much choice unless you are willing to accept a very open access policy. This brings me to another important wish More granular outbound access control .