check pages 8 and 9 of the release notes for the note about file transfer port by default they are the following.
" File Transfer TFTP 1025 to 5000 UPD/TCP "
This isn't tennable and you will likely want to follow the note on page 9 on how to set this to one specific port and then you can add that to the firewall rules.
https://support.symantec.com/en_US/article.DOC9206.html
Note: To configure the file transfer port, in the Ghost Solution Suite console to use a specific port, navigate to Tools > Options > Global tab. Check the Client/Server file transfer port check-box and set the dedicated port that you want to use.
Sorry that this information hasn't been included on all of the locations that were published I believe after HF2 for 3.0 I was able to request the note on file transfer port be added to each release note and user guide since.
Hope that helps.