The applications on the server needs to be checked, i.e. the port on that it works on. Based on you need to allow the transaction.
the best way is to allow all the traffic and set it to log, then based on the analysis of traffic, you can allow/block.