Thank you Robert, but you're talking a bit above my head
with the acronyms.

I assume ICS is the Windows firewall, which I can easily
turn on and off, yes.

When you say "...with exception" I presume you mean just
specify the custom ports to leave open for PCA or
anything else trolling along.

I expect that will work but I wanted to have those ports
only open for the specific .EXE's that PCA requires for
this system to be a host.  From poking around the
Firewall options it looks as if I can (a) add the
PCA's .EXE that isn't yet on the list, and (b) use some
sort of syntax to open just that particular .EXE up for
only the 2 custom ports it needs.  That would be more
secure.

Maybe my assumptions are wrong about the custom
capabilities of the Windows Firewall.

I can also look up how to use the netstat command.

As a thanks and courtesy(?), note you have a grammar
error in your SIG file.

-Ian