When the firewall is set to block all port traffic by default, which ports do the apps need to open to access the Internet

You can try port 80/443 or port 1883.