Port Configuration

hi, I have a doubt about the configuration of the doors of the central SEPM 14.2 that I am installing. 
It's not clear to me if the 8447, 8765 and 1100 ports have to be configured on the perimeter firewall 
or if they are only to be configured on the SEPM server local firewall. In particular it is not clear 
to me if port 8447 is used to perform operations with elevated privileges from console to clients or only
into server SEPM

Thank you