What firewall ports have to be opened for windows client monitoring

General
3

the clients are located at the segment different from the check_MK servers.

So, just have to allow tcp 6556 only? tcp 80 and 443 not need?