The FirewallException should allow port and name attributes to be formatted values. E.g. <fire:firewallexception id="user-content-FWXSQL" name="SQL <span>[SqlPort]</span>" port="<span>[SqlPort]</span>" protocol="udp" scope="any"></fire:firewallexception>
(I thought I had already raised the bug but couldn't find it again.)
Dup of 2062684