What ports to open in Azure Network Security groups

Hi,

I will be installing Windows Server Protection in some Azure VM's, what ports do i need to open to allow proper communication to the Sophos Cloud Management Console and to get updates? 

Thanks.