Only the TCP ports 6005 and 6006 and 6011 (only when using an MDM server) have to be released for communication . This apllies as followed:
agent 6006 6005
server 6005 6006
console 6006 6005
MDM Server 6011 –
The ports can be changed arbitrarily and at any time . Also separate ports for agent and console, and an extra https port are possible for an advanced configuration.