Port 20008 is used to download a project from TIA Portal to the runtime.

So, if you want to do a remote download then this port has to be open.