Here is a good Technet article about SCCM ports that it is using to communicate.
After reading this I think there should be no questions left what ports must be opened on firewalls.