Zone Alarm Pro configuration

Hi,

I'm working on a project that'd consist of installing Zone Alarm Pro 5.5 on 800 laptops.
I'm facing 2 problems at the moment :

1. VPN
We use a Cisco VPN, with the client installed on the computers.
This client has to connect to our servers on port 12345.
So the rule I'm trying to create would only allow that executable to go though the Internet zone, on that port, toward our 2 gateways. And that only.
But when I create this expert rule and leave a red checkmark on the access Internet zone (so to not allow anything but the expert rule to go through), the

client cannot connect. If I change it to a green checkmark, the client can go anywhere on any port it wants, even if I don't create an expert rule that

allows it. On the contrary, if I create an expert rule that specifically forbids the connection, this rule works and no connection is allowed, even with

the green checkmark on.
This puzzles me.
I tried a similar setup with IE, allowing it to go though on port 80, with the red checkmark on. Doesn't go though either.
What am I doing wrong here?

2. Automatic configuration
Once I'll have defined the right configuration, I'll need a way to automatically bring it to every computer. Once the first time when we'll install the

firewall, and then every time there's a change.
So far, I've found that I can manually export most of the configuration to an .xml file and manually import it on another computer. That doesn't help much,

apart from testing purposes.
I've also found that the configuration seems to be stored in c:\windows\internet logs\iamdb.rdb. But if this file is taken from a computer and put on an

other, the size shrinks to 73K and all configuration is lost. It looks like this file is linked to the machine it was created from.
I'm badly stuck with this, for this firewall cannot be installed without some automation.

Thanks for the help.