OK so it is port 80/443/8443 out to the web service. If a client of SQLServer calls SQLServer then ingress is on 1433 but we have to allow egress on 1024 to 65535 may be narrower if it's to a *mix box or recent Windows server