I have Checkpoint running on NT and my external interface make connections to web servers on the internet all the time and when I do an netstat -a, I can see many ports open to other destination servers on port 80. Is this normal?
