Normally we need only to open port 5062 on the egde for SBA. Ref: http://www.microsoft.com/en-us/download/confirmation.aspx?id=39968 - check the right bottom picture
If there are no directors in the topology, then also 5061 two ways.
Note that port 5062 is needed on Edge servrs assigned to SBA/FrontEnd pool. However, I recommend to open it in all other edges pools as well. This way you have a flexibility to change edge pool in needed.