Windows firewall exceptions

Let's use VNC as an example.
Go into VNC and set unique ports for VNC client and HTTP client.
In windows firewall (under network connections) just go to the EXCEPTIONS tab and ADD PORT.
Enter in your information for the VNC client port you have configured
The default is that ALL IP's will have access. You can limit this to set IP ranges