An architect is setting up Panorama High Availability (HA). Which port and protocol combination must be permitted between Panorama HA peers across the network for HA heartbeat and state synchronization?