Hi Karim,

To my knowledge, you cannot use port 5049 for license validation checks. This is not configurable - your customer must open port 5048. Port 5049 is used only for actual authentication calls. 

The information transferred in the license check is the contents of the Forms lf.licx license file itself. This would not generally be considered sensitive information. Transmitting it in the clear does not present a meaningful risk. If an attacker is in a position to intercept traffic between the DMZ and internal network zones, they can easily obtain any relevant information they'd find in the license validation check messages by other means as well.