In general, all traffic is started by the workstation and requires only outbound TCP connections to the outside of the property.

Workstations running Oracle Linux for MICROS use SSH. Therefore, SSH inbound might be needed for these connections (normally Port 22). If this port is intended for a local connection only, take measures to restrict wider access (that is, on WAN Firewall).