When installing a DM just for content downloads and Patch Management downloads in a DMZ,
CA Client Automation - All versions
Regarding the ports need to use with in the DM with content downloads and patch managements, you
can find information about port used by web console and web services in the note located in the end
of this section your referred for the DM:
Ports Used by the Domain Manager
And in this Engine section to communicate with the Content Server (port 443 or 5250),
Additionally, following a few ref. articles which would be useful for regarding the communication
with the content server and the Patch Management:
Testing Connectivity to the CA Content Server (ACME) server for signature and content updates
Internet sites Patch Management should have access to
Sites required for Patch Manager to download Microsoft patches.