I have some services that require 25+ ports be opened through the firewall, and it is both ugly and tedious to make all these rules by hand.

It's also very error prone, and it makes maintenance or changes a chore.

I suggest having Service Groups, similar to IP groups, to streamline the process.