The PGP Universal server is a fairly complex piece of work that provides several different services. When constructing firewall rules I am trying to determine what implications there are for opening up the various components.
For example, it stands to reason that the key server bit (ports 389/636) needs to be open fairly broadly so that the public keys of your clients are accessible. What about the port (https over 443) used by the Desktop application to download updates and policies? What would be the implications of opening this up globally?