Firewall configuration for SEPM

Hello Guys.

As i found in one of docs that to allow LiveUpdate for SEP i need to whitelist in firewall
liveupdate.symantecliveupdate.com, liveupdate.symantec.com, akami.net for HTTP connection (TCP port 80).
update.symantec.com for FTP connection (TCP port 21).

So my questions are:
Is this also true for SEPM? I want to open this connections only for SEPM server and after that distribute definitions locally.
Will it be a big issue if FTP port blocked in firewall or HTTP connection is enough?
Can you please correct me if something wrong? 

Thank you in advance for advices.