This maybe a dumb question, so bear with me for a moment!

Would it be better (i.e. more secure) to replace the default BM
expection
shown below with a statefull alternative. The main reason for this is
the
1024-65535 ports being open. And if so what are the advantages and
disadvantages :

DIVAB2M_1_2 - dynamic/tcp <All Interfaces>
DIVAB2M_1_2 - dynamic/udp <All Interfaces>

Statefull alternative might look like this :

DIVAB2M_1_2 - tcp-st <All Interfaces>
DIVAB2M_1_2 - udp-st <All Interfaces>




Thanks,

Richard.