443 (TCP) Requires outgoing access for the Server (address book sync) and the Worker (it attempts to use the Gmail API for archiving; if that fails, it reverts to IMAP, thus the need for port 993 as described below).
993 (TCP). Requires outgoing access for the Workers only. Under certain circumstances, the Worker may switch to using IMAP over SSL when requesting email from Gmail.