Please see the attachment I've provided.
Recommendation: The Cisco recommendation is to set up CallManager Windows 2000 services as stated in the attachment. The operational services will result in the opening of core, and CM version specific data ports. It is not recommended not to restrict these ports in any manner for the sake operational / stability issues. However, any changes to CM environment should be thoroughly tested in a lab environment before going into production.
Hope this helps.
Dan
