Firewall Ports to be unblocked to allow traffic to flow between SBC and CUCM

Hi

I am in the process of configuring 3900's for a client, call flow SBC --> CUCM --> Service Provider and the same way back, between the SBC and the CUCM there is a firewall that the client does not want to bypass, what ports would they need to open up on the firewall for RTP and Signalling to flow through? I know the RTP ports need to be open as well as 5060 TCP- are there any other ports that would need to be open?

Thanks