edited September 2011
Yes, you have to open some ports for Photon. TCP 9090 is used by websockets. To support the Flash-socket fallback, you need to open TCP 843, too. This is where Flash tries to fetch the crossdomain policy.