Firewall port requirements for Message Broker can be found under the following link:
https://help.sap.com/viewer/fsm_system_requirements/Cloud/en-US/sap-ecc-requirements.html
The firewall needs to allow access via HTTPS to auth.coresuite.com:443 and [de|eu|us|cn|au].coresuite.com:443.