my 2 cents interpretation:
On LAN computers there's a program that connects to the outside world using port 8443.
This means tcp8443 has to be open for outgoing packets. This does NOT involve port mappings
All setup wizards give "unfiltered internet access" so no extra config is required.