AD CS Server use RPC port 40008

Hello,

i wanna allow the computers to request certificats from our AD CS 2016 Server on the firewall.

Many docs mention that RPC use the dynamic port range 49152-65535, but the test computer tried to join the AD CS server on a lower port 40008/TCP