Is the accounting feature a catch all "port utilization" rule or does every port need to be configured in order for it to trigger.