This is a hard question based on your design about. However, I will try to answer. The IIS server has to have port 4747 open to the QlikView server. Each webserver will need port 80 and 443 (I think you said you want both SSL traffic and non SSL traffic to webservers).
This is what QlikView needs. Now there are other issues you might run into like the posts needed for AD to work and anyother Windows communications.