These ports must be open on your internal firewall in order to allow communication between the server and client systems for Control.
These ports must be allowed for Outgoing (external) communication on your firewall in order to allow communication between the Control server and the Cyrious Cloud App servers.