The Allow/Block Rules provide you with greater flexibility in defining and customizing your security policy. You can allow additional inbound services which are not on the ‘Virtual Servers’ list, or block outbound communications for specific port ranges.
If you wish to permit incoming access from the Internet to your internal network for specific port ranges, you must create a new ‘Allow’ rule. If you wish to block outgoing access from your internal network to the Internet for specific port ranges, you must create a new ‘Block’ rule.
2