This Integer32 object sets the lower bound of the destination-port range a packet must satisfy to match this General Access List entry, with -1 meaning the field is a wildcard. It lets an administrator target rules at specific server-side services, such as restricting a rule to ports serving a particular application cluster. For example, setting this to 8000 as the start of a destination port range would exclude standard web traffic on port 80 from matching.