Firewall ports for push deployment

hello,

I am currently deploying SEP client to DMZ from another network. There is a hardware firewall between DMZ and network of SEPM.

I read from Symantec Articles of the required port 8014 and 445 in firewall.However it does not work because the search client fail to find any computer.

Is it required to allow icmp in hardware firewall?

Thank you very much