Cloud control 12c:What ports need to be open in firewall for agents to upload to oms?

I am trying to deploy agents on several hosts, but they have firewall restriction to the OMS. I have asked for the port 4899 to be open on the OMS (for the upload to oms), and the port 3872 (agent) to be opened on each host.(for OMS to talk to agent) Is this correct, or am I missing something? The agent still can't talk to the oms.See below results from emctl status oms -details

Console Server Host        : testomsserver.local
HTTP Console Port          : 7789
HTTPS Console Port         : 7800
HTTP Upload Port           : 4890
HTTPS Upload Port          : 4899
EM Instance Home           : c:\middleware\gc_inst\em\EMGC_OMS1