that is a good one. are you looking for these port based traffic from specific networks or websites or in general?   if it is specific, the custom expressions have much more expressions within it that may be useful like appending the network or local network with the port and then create a l4/l7 firewall rule to check for specific UDP /TCP ports that you want to allow/reject.   DO let me know how you achieved this though... this is really interesting!!! ... View more