Firewall Rules Ambiguity?

Satellite 5.8 Installation guide (https://access.redhat.com/documentation/en-us/red_hat_satellite/5.8/html/installation_guide/sect-additional_requirements#Firewall) has a Firewall requirements section. Most of this is pretty clear except for the section at the bottom:

--snip--
Open your firewall to the following hosts for access to Red Hat's Content Delivery Network (CDN):

subscription.rhsm.redhat.com
cdn.redhat.com
cert-api.access.redhat.com (if using Red Hat Insights)
api.access.redhat.com (if using Red Hat Insights)
--snip--

This wouldn't be a problem except that many firewalls don't work with FQDN; they use IPs. Not only that but the above guidance doesn't specify direction OR port numbers.

Can anyone clarify what the firewall should be doing here?