Starting in Workbook 2021, changes were made for more secure client/vault communication. Port 80 is no longer used from the client to the server. All external traffic should go over https to port 443. Anything over port 80 will be local such as communication between the vault server and RAS. These changes are also reflected in the fact that all private services for Workbook cannot be accessed outside of the vault server and public ones are only available on port 443 through https.
The VaultClientService (port 4499) will be accessed directly from the client for the history dialog.
In summary, ports 443 and 4499 need to be opened on the vault server for communication from client to the server.