Remainder: open those ports

VMs sees the network as Public and by default TFS setup opens the Firewall only on Private networks.