2nd port of primary server is unused, so it might be more trust-able for external port check in session profile stage