Thank you Mikrotik for allowing us to change the port for winbox service. In response to this I have taken the time to create an L7-Filter pattern for winbox connections.
/ip firewall layer7-protocol add comment=“” name=“winbox” regexp=“\12\02index”
Tks for you regex, can you put on the wiki?
Max.