PCM600 does not require specific ports to be open. However, Update Manager requires allowing outbound connections to port 443 (https protocol).
To set up an IP firewall, see the IED-specific cyber security deployment guidelines for the ports that are used to communicate and to configure the IEDs. All closed ports can be opened in the configuration. Ports that are open by default are used for configuring or monitoring the protection IED.