scanning other domains behind a firewall

[Jokey]

Hello,

we want to scan our other domains, but these domains are behind a firewall.

Please, can you tell me which tcp ports must be open to use active scanning?

[Hemoco]

Service and website to SQL server
Port: 1433/TCP

Clients to Service (if lsclient or lstrigger is used)
Port: 9524/TCP (this port must be open on the firewall of the lansweeper scanning server)

Service to clients
1) Port: 135/TCP (DCOM to Establish initial session for WMI)
2) Random ports (WMI Data)


Service to active directory domain controllers (if active scanning is used)
Port: 389/TCP (LDAP port)