Winsock Proxy and Firewall-1 remote administration

["Joe Ippolito" <joe () joesnet com>]

I would like to allow only firewall-1 administrators through MS Proxy's
Winsock Proxy to administer multiple Check Point firewalls in a large
International organization.  Anyone know what ports I need to give them
permissions to to access a management server at another site?  If I give all
users the same permissions then anyone at that site wearing their Winsock
proxy looks like the same host to the Firewall-1 management box.