All the client computers should be able to access the service IP address and the port configured to use HTTPS. TCP port 443 is recommended.
For outgoing mail, it should be possible to contact either a smart relay or the Internet. This requires opening the TCP port 25 for SMTP traffic. Note that this outgoing connection is usually done from the server default interface, not the service interface.