1 for webshield
2 for pop3
3 for smtp
4 for imap
5 for nntp
6 for pop3+ssl
7 for smtp+ssl
8 for imap+ssl
9 for nntp+ssl
and the connections? Well, hmm, if you browse, you browse via webshield, and webshield have to connect to download the payload.
The truth is the same service would propably be possible to implement on fewer ports and implement some other kind of detection what type of connection it is - web or mail etc., but it would only add more difficulties for us programmers and no benefits for you as a user.