Inquiry on Firewall Ports Required / Commvault Intellisnap v11 SP17

I got the following setup to implement in my environment:

Commvault V11 SP17 across

Commvault infrastructure:
CommServer
Media Agents

Commvault clients:
Exchange DAG 2010
Hyper-V cluster
Netapp array ( to be use as an NDMP client )
SQL AAG


All the Commvault cients have Netapp array as storage

There is a firewall separating the Commvault clients and the Commvault infrastructure.  What I would like to know is what are the firewall ports needed to ensure Commvault Intellisnap will be able to work even with the firewall present 
between them.  There is nothing in books online to say what firewall ports are needed.

Also with regards to Hyper-V I would like to utilize Live browse even with the firewall ports presence so would like to know also of the requirements including ports to open

Any other materials or info to implement this is appreciated.

Basic Port Requirements: https://documentation.commvault.com/commvault/v11_sp18/article?p=7104.htm

If the MediaAgents are not directly connected to the Netapp this will get rather slow through the firewall though.

To limit the number of Ports to be opened in FW I'd recommend Tunneling the Connections through cvfwd and TPPMs where possible.

https://documentation.commvault.com/commvault/v11_sp18/article?p=7170.htm

https://documentation.commvault.com/commvault/v11_sp18/article?p=7410.htm