I was playing with the firewall and I’ve set the Alert Settings on Very High. I noticed that if I allow/block the connection, the rule for Source Address and Source Port is set to any instead of my IP and the port it tries to use. Is that normal or bug? The destination Address and the Destination Port is set fine.
If you have the firewall settings on Custom Policy mode with Alerts on Very High, it will record and create rules for the Source address, Destination address and Destination port. It won’t record, or include in the rule, the source port. Unfortunately.
I’m sure it used to do that once upon-a-time, I’ll have to install some older versions…