Default Allow Service groups

USG60 - Still setting up and getting used to the object oriented way. LOL I don't use HTTPS to access the router from outside of the local network, did not like port 443 showing as open, so I unchecked HTTPS under WWW control. I also did not like port 443 showing as closed at that point. I could have added a rule blocking HTTPS from Wan to Device, but instead removed HTTPS from the Default allow Service Group. It seems to do what I wanted and works, but am I going to find something else broken down the road? Is there a better way to stealth port 443? -- My goal in life is to be as good of a person as my dog already thinks I am.