Firewall Requirements for Team Foundation
Team Foundation Server setup automatically configures and opens the TCP ports used by Team Foundation Server on Windows Firewall. However, within enterprise and data center infrastructures, other software and hardware firewalls are commonly used. You must physically configure any software and hardware firewalls within your Team Foundation Server deployment to allow traffic on the ports that Team Foundation Server uses so that client computers and remote clients can connect to Team Foundation Server, and Team Foundation Server can communicate with clients.
For more information about network ports and traffic you must configure for Team Foundation Server, see Network Requirements and Considerations.