Firewall ports / rules required for client deployment direct from SEPM server

Hi,

I am looking for verification regarding what firewall ports are required for deploying SEP clients directly from the SEPM server.

At the moment we export clients, move them to SCCM, and deploy them to machines using this method.

I would like the ability to do this direct from the SEPM console, but it looks like there is a connectivity issue.

Can someone verify what Firewall rules need to be in place in order to achieve this?

Thanks.