For a ProjectWise Explorer or ProjectWise Administrator client to access a hosted ProjectWise datasource, these clients will establish a connection to a single IP address over port 5800. Every hosted deployment is given a single, unique IP address. This requires that any firewall allow egress (outbound) traffic to this single IP address and port. In addition, the same egress access is required for any caching server or gateway service you deploy on your network. You will not need to allow ingress (inbound) traffic on port 5800.
In addition you may have a separate Web Services Gateway server with another unique IP address, to be used with port 443.
If you plan to use any of the ProjectWise 365 services, you will need to open port 443 (https) on the Web Services Gateway server IP address. In addition, the following sites are used as the landing page for the various services. They also use port 443 (https):
For each service, here is a current list of web sites that are also accessed using the same https port: