isa2006 mms allow out

Which inbound ports should you allow on the hardware firewall?