AD CS Server use RPC port 40008

Hello,   i wanna allow the computers to request certificats from our AD CS 2016 Server on the firewall.   Many docs mention that RPC use the dynamic port range 49152-65535, but the test computer ...