It is port 65500 that we only need outbound from your DSS and it is using encrypted SSH.