All Electronic Trading APIs establish direct TCP socket connection to a port configured in backend SCS server, hence we don't expect firewall blocking it.

As for traffic encryption, it could be done outside of ET-implementing application via additional SCS relay to perform TLS encryption.