Added in ForeScout NAC local service workaround in usable port forwarding ranges, thanks to @wherenow_hugh