Ports used by Profile Manager clarification

Can anyone clarify what Apple mean by 'open on your network'?

Ports usually are open 'on' a network,

Is this traffic from the Mac server to somewhere at Apple.com or the other direction or both?