The agent itself does not listen on any ports, so there is no need to punch any holes in your firewall.
However, if your corporate network blocks outgoing ports, then a small change is required. The agent needs to contact
broker.ardexa.com on port
This is a TLS connection, but it is not HTTP-based and therefore cannot be sent through a Proxy Server.