port need to open from sepm server to client machine and sepm server to internet

Dear support,

    which are the port need to open between sepm server and client machine?

Symantec server need internet access to download the liveupdate content??

if yes,what are port i need to openin firwall or any site need to open from firwall???