web portal vpn

I recently replaced my main fortinet unit, moving from old one with 5.2.4 software to new box with 5.6 software

found out the hard way that several of my remote users (and I mean remote) are still using XP laptops.

they have forticlient 5.4.1 but cannot connect ,probably due to xp not supporting anything past tls 1.0

tried enabling tls 1.o on the fortinet box, but still cannot connect.

next step was to try the ssl vpn web portal, but I have question - if you do not specify ports ,does it allow all?

I really need it to allow all ports, but it looks like I can only allow the ports it has in the drop down