To install the agent from the AA console, you need to have ports open for SMB, Service Management, WMI and AD. So you would need to have ports 445, 389, 135 and the RCP Dynmaic ports (Ephemeral Ports). If you want to be able to manage the agent from the AA console (uninstall, upgrade, restart) you will need to keep the previously mentioned ports open. Once the agent is installed it communicates back to the AA database over the SQL port (default is 1433).