PORTS for SEPM 12.1.4

OS: W2K12

I know there are many ports questions asked on this forum, however, I cannot find the answer to my specific scenario.

My security department has run scans on open ports for the IP affixed to my SEPM server.  It  returned ports 2967 and 38292. I know that clients communicate using 8014 and the SEPM uses 8443.  They did not show up in the scan but if I do a netstat -ano I can see ports 8014,8443 established or listening. 

My question is, do I need to keep ports 2967 and 38292 open?  I'm a bit confused.  I am also new to admin'ing Symantec server so this is a learning process for me.

-Brian