The fire wall ports that you must have open are HTTP and RSTP, so that is port 80 and 554 respectfully. HTTP is used often as protocols on the web. The reason you should open both is because it uses a thing called Protocol rollover. Protocol rollover is used to negotiate the most efficient protocol they have in common. It’s possible to specify which protocol the administrator wants to use with URL prefixes. It is very effective to enable both protocols to add an overall better user experience. SSL is the recommended security method for running the Windows Media Administration site. Secure Socket Layer provides the highest level of security by encrypting data before it’s sent over the network according to Microsoft’s web site. It still has to be used with another authentication method as well. Personally, I feel like basic authentication offers some advantages. One of those advantages is that the users have to have a username and password to access the website. The administrators manage the usernames and passwords as well. Basic authentication also works with most browsers, easy to manage and easy to use. One downfall is that the credentials are not encrypted. That one downfall is a huge security risk that most wouldn’t be willing to take. As a network admin you want the risk to be as low as possible. Confidentiality, integrity and availability are the most important keys when running a network. The three protocols used by Windows Media Services to administer the server are Real Time Streaming Protocol, Hypertext Transfer Protocol and Microsoft Media Server. Real time Streaming Protocol is a control protocol, used by default in Windows Media Services running on Windows server 2008. The protocol uses port number 554 as stated earlier. Hypertext Transfer Protocol is the standard application layer protocol for Web communications. This protocol uses port 80, and the secure version HTTPS uses port 443. Microsoft Media Server is used to transfer real-time multimedia data mostly audio and video.
References

Microsoft. (n.d.). 8.2.3 Microsoft Media Server Protocol. Retrieved May 23, 2015, from Microsoft MSDN: https://msdn.microsoft.com/en-us/library/cc239490.aspx
Microsoft Technet. (n.d.). Using Basic Authentication. Retrieved May 23, 2015, from Microsoft Technet: https://technet.microsoft.com/en-us/library/cc732988.aspx
MOAC. (2012). NT2670 MOAC Textbook for ITT. [VitalSource Bookshelf version]. Retrieved from http://itt-tech.vitalsource.com/books/9781118550861/page/142