BE with firewall

Hi Everyone

My end user doesn't allow the firewall to be "any to any" enabled.
He need some information about sources and targets.
bi-directionally or not.

https://www.veritas.com/support/en_US/article.100017208
V-370-59792-00041 - How to configure ports in firewall for Backup Exec
refer to the kb. the kb does not show about sources and targets.

The following is what I wrote.
Please give me some idea, if there is an error.

Thank you.

1)
Service : Backup Exec Agent Browser
Process : benetns.exe
Port : 6101
Port Type : TCP

Source : remote agent
Target : Backup Exec Server
unidirectional

2)
Service : Backup Exec Server
Process : beserver.exe
Port : 3527, 6106
Port Type : TCP

Source : remote agent
Target : Backup Exec Server
unidirectional

3)
Service : Backup Exec Job Engine
Process : bengine.exe
Port : 5633 by default, Can be customized, Used for Oracle
Port Type : TCP

Source : Agent for Oracle on Windows or Linux
Target : Backup Exec Server
unidirectional

4)
Service : Agent for Windows, Agent for Linux, Agent for Oracle on Windows or Linux
Process : beremote
Port : 10000
Port Type : TCP

Source : remote agent
Target : Backup Exec Server
bi-directionally

5)
Service : Agent for Windows, Agent for Linux, Agent for Oracle on Windows or Linux
Process : beremote
Port : Dynamic range between 1024 to 65535 by default , Can be customized
Port Type : TCP

Source : Backup Exec Server
Target : remote agent
unidirectional

6)
Service : Backup Exec Management Service
Process : BackupExecManagementService.exe
Port : 50104
Port Type : TCP

Source : remote agent
Target : Backup Exec Server
bi-directionally

7)
Service : Deduplication engine
Process : Spoold.exe
Port : 10082
Port Type : TCP
Source : Backup Exec Server or remote agent
Target : Backup Exec Server
bi-directionally

8)
Service : Deduplication Manager
Process : Spad.exe
Port : 10102
Port Type : TCP
Source : Backup Exec Server or remote agent
Target : Backup Exec Server
bi-directionally