This DisplayString object names a numeric-list of destination ports this General Access List rule matches, with an empty string acting as a wildcard so the rule is not restricted by destination port at all. The desc again ties correct operation to having a matching entry in csOrionNumericListTable, so the named list must exist before the rule can take effect. For example, an administrator wanting to allow only ports 443 and 8443 to a web farm could define a numeric-list containing those two ports and reference its name here.