Secure BAAN IV Windows Server

We want to make our BAAN IV Windows Server max save.
So we decide to put is behind a transparent bridge firewall.

What ports are needed for Windows/Client Bshell ?
Have someone tried this?
Have someone an idea?

Thank You!