Are there any ports that need to be opened in Windows firewall for the AppLoader Controller and the Injector?

Yes, ensure that your firewall is not blocking communication to the Controller through web server ports 8888, 9001, and 9002.