This Integer32 object defines the lower bound of a source-port range that a packet must fall within to match this General Access List entry, with -1 meaning any source port. It gives an administrator fine control over which client-side ports are covered by a rule, useful when restricting traffic from ephemeral port ranges used by a particular application. For example, setting this to 1024 together with an end value would exclude well-known ports below 1024 from matching this entry.