Hi,
Firewall Ports Client Network -> Configuration Manager Roles
67 UDP. PXE Distribution Point
68 UDP. PXE Distribution Point
69 UDP. PXE Distribution Point
80 TCP. Distribution Point, Fallback Status Point, Management point,
443 TCP. Distribution Point, Management point (secure)
4011 UDP. PXE Distribution Point
8530 TCP. Software Update Point.
8531 TCP. Software Update Point (secure).
10123 TCP. Management Point.
For more information, please refer to link below:
SCCM Firewall ports required by clients
Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.