I am working on the segmentation of a network. Domain controllers and clients are located in different VLANs and are separated by a hardware firewall. Many ports must be opened for communication in the domain. In my opinion, most of the required ports are inbound on the domain controller side, so that clients can establish connections to the DC.
What I want to know is: Do I need to explicitly open ports inbound on the client side for the domain to work properly?