A simple fiddler trace will show, that not only 9002 is in use by the xFlow UI.
I assume the following:
from a UI perspective you need to open
9002 : base UI
9006 : microservice for elastic search wrapping
9008 : websocket for notifications
9014 : collaboration
9016 : insights
8080 : for access to standard web UI, beside all other standard UI ports
Please check and confirm
Thanks
...........Michael