Cortado Workplace - Which port(s) have to be opened in the firewall?

Answer:

Port 4001 Outbound has to be open.
If necessary for IT security reasons it should be mapped to the target domain cortado.mobi.