Apart from SapphireIMS application port, do I need to open additonal port for advanced reports module?

Advanced reports AR module is a add-on component which is a micro-service architecture and it runs on port 9099 with rest interface. The port is configurable and you may change it. In the firewall we need to open SapphreIMS application port which typically runs on 443 port and 9099 or user defined port if advanced reporting module is enabled as an inbound.

Please refer SapphireIMS 5.0 Prerequisites Document for details.