Service to SQL
1433 TCP
Website to SQL
1433 TCP
Clients to Service (if lsclient is used)
9524 TCP
Service to clients
135 TCP DCOM to Establish Session for WMI
Random ? WMI Data
http://msdn.microsoft.com/en-us/library/aa389286%28VS.85%29.aspx
http://msdn.microsoft.com/en-us/library/bb219447%28VS.85%29.aspx
Service to active directory (if active scanning is used)
389 TCP LDAP port
To all domaincontrollers in the domain.