Although the connection hand-shake starts on port 1521, other ports are dynamically assigned unless specifically inhibited (redirection).

Suggest you search Metalink for "firewall"
(e.g. Doc ID: Note:125021.1 Subject: Oracle Connections and Firewalls).

USE_SHARED_SOCKET=TRUE in the Windows environment worked OK for me . . . .