In order for the appropriate servers to communicate and visitors access the platform and experiences, you need to open the following ports:

Port 80 (open DMZ) - this allows external people to access any content or information you've published within the platform.  the same content/experience permissions still apply.
Port 443 (open DMZ) - this is the secured port which is recommended for all websites.
DNS - portal.yourcompany.com (additional domains may be configured.  We recommend you provide a wild card (*.) domain name e.g. *.content.yourcompany.com to launch new domains in seconds)

Port 443 - we recommend these be opened for port 443 only in an effort to adhere to the highest  level in securityDNS - control.yourcompany.com and api.yourcompany.com

Port 1433 - this is the port for SQL server to be accessed.  It ONLY needs to be connected to the Web Server for API.  So your firewall can block any other IP address (highly recommended)

If you opt for a storage server instead of CDN, you must enable FTP publishing or a POST method to upload files.   The necessary ports will need to be configured depending on connection type.