PA don't need to open any ports on client, but it's should able to connect servers on different IPs with TCP ports in 9000-9050 range.