I have checked with the client and they believe they are forwarding ports 22331 and 22333.
Can you please see this article? It might be helpful for you -
https://developer.milestonesys.com/s/article/Ports-for-alarms-from-Milestone-Event-Server-service