An overview of ports, sources and destinations of WorkspaceONE and Access can be looked up here:
https://ports.esp.vmware.com/home/Workspace-ONE-UEM+Workspace-ONE-Access

You can filter by "Devices" at the source.
The Intelligent Hub mainly needs a connection to the Device Services servers. Which other targets are necessary depends on the WorkspaceONE environment and the operating systems of the managed devices.