I need to set up an ACL to allow only VNC access (TCP-5900) and thought I'd be able to create a new service for that. However I'm only able to create a new service-group. I did that, and clicked on 'add a new protocol' which I did for TCP 5900. Then I apply that when creating the ACL, but it does not do anything.
Is there a way to create a new service? Or what is the way you create an ACL that allows only VPN - or any single TCP port number for that matter that is not in the pre-defined service list?