Hello Adam,
Thank you for your question. This actually looks like a minor mistake in the documentation. I just raised the issue with the team and we are working to correct it.
Ports 6443, 10250, and 8472 do not need to be accessible outside of the appliance itself.
Port 22 should be inbound to allow SSH connections to the appliance. Ports 443 and 65000/650001 should be outbound to allow the connection to Resilient.
Best wishes,
Brian
------------------------------
Brian Reid
------------------------------