What ports are exposed on the ‘untrusted’ interface of the Xona CSG appliance?

Only Port 443 (bidirectional) is exposed from the untrusted interface.

Optionally, port 22 (SSH) can be enabled, but it is disabled by default.