Enterprise Bridge itself never connects outside for whatever purpose, except for connection to data source and data target. Enterprise Bridge does not use any external hosts or ports for its own operation.
Firewall rules must include only addresses and ports of source and target systems intended for migration. Which address, protocol and port must be enabled for each system is totally depending on the nature of the system. Please consult system administrators for specific configuration of your data systems and enterprise portals to establish network requirements and necessary connection parameters.