Port to open for RDP connection to VM in DMZ ?

Hi All,

Can anyone here please share and suggest what TCP/UDP ports to be opened in the firewall to allow Remote Desktop Connection to the Windows Server in different AD domain & DMZ network ?

I've tested with the RDP session, I cannot connect to it, but then the PortQRY result shows like:

See the result here:

TCP port 3389 (ms-wbt-server service): NOT LISTENING

UDP port 3389 (ms-wbt-server service): LISTENING or FILTERED
portqry.exe -n 192.168.4.1 -e 3389 -p BOTH exits with return code 0x00000002.

Select allOpen in new window

is that means additional port must be opened ?

Thanks.