Knx secure over ip

[domotiqa]

Each KNX secure device has a sending sequence number that is required for secure communication. It cannot be added manually or via object import. You must import ETS project into both LMs.

hi admin. 
1/ So it mean when we have project with gundreds of group adress we need to add all of them ? if thousand ? is there known limitation on dummy secure device ?
2/I tried to test the secure ip connection to one of our remote site (firewalled on our company ip)? We opened the 3671 (UDP, but alos tcp) on demand. I did a test, add ip secure dummy product. define project password. export diag secure key. save ets project, import the key,a ctivate communication secure only. then on Ets try to communicate with LM.I have a timeout. is it still 3671 ? any help appreciate.

Note: i saw: 
At this moment only secure Routing (multicast) is supported. Backbone key can be found in ETS > Reports > Project Security. You can export report to PDF to be able to copy/paste the key. The option to automatically extract this key when importing the project file will be added later.

is it still case ? maybe the reason

My hope was to secure ip connection quick on each customer, even on their own lan.