I am going to roll the SDP agent out to a "severely segmented network" with a "severely segmented IT Department". I was asked to provide all of the ports that will be needed to allow the Remote Control feature as well as the scanning to work.
I will be rolling the agent out through group policy to all of the computer that touch our wire and authenticate to the domain. Our SDP sits on a DMZ with an any/any rule to a RODC on another segmented network on an offsite(Cloud) network. This offsite network only runs all of our public facing services and is locked down like fort knox (I only have ping, RDP, and HTTP access to it at the moment)
I have configured the agent to the Local IP address of the server on port 8080 and have set the agent port to be 8888. Will these two ports be enough to use all of the services on the agent or are there others that I will need to open up on the private interface to the SDP server?