Patching clients in the DMZ

Which ports need to be opened up and which direction in order for Desktop Central to patch clients in the DMZ. Desktop Central server is not in the DMZ (FYI).

Thanks.