TP Link Kasa discovery - Synology firewall

I have home assistant running in docker on a Synology nas. I currently have the Synology firewall locked down to only allow necessary traffic. However, this means that home assistant cannot discover my tp link kp115 smart plugs without allowing all traffic through the firewall. Does anyone know which ports must be open to allow discovery of tp link kasa smart plugs?