xp sp2 firewall question (port or program exception?)

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

port or program exception?

2967

I use a symantec AV product that has a server side component that allows
remote administration of the client machines. I did a quick google and
checked the xp sp2 firewall log to verify the server component operates over
UDP port 2967. The one net article I saw said to just open the port. I have
done this and it works fine. But.. this made me think. Why didn't I use a
program exception for this? Can I? I am now confused on xp firewall
functionality. I understand that is does not block any outbound traffic...
so then any 'expection' whether port or program would have to be for
unsolicited inbound connections right? how would a program exception work
then?

gotta run... any info would be greatly appreciated. Thanks.