cnMaestro ports configuration

Anyone knows what port cnMaestro use to push new software image to the radio (PTP450i)?

Just deployed cnMaestro and working on FW rules to allow traffic. Curious what basic firewall config I need from the server end perspective?

SNMP (inbound) - assuming remote radio initiate conversation, correct?
Anything else needed for basic radio monitoring/ onboarding and new image push?
cnMaestro On-prem v2.4.1.

Thanks

I believe all traffic between devices and cnMaestro runs over https, port 443, with connections always initiated by the device.