Istio installation behind firewall

Hi, I need to install Istio on my private AKS cluster which is behind the firewall and locked for internet. Can anyone suggest what FQDN/port needs to be open at firewall level to get the data for Istio?