Reading the PMG admin manual I found the firewall settings at 2.3. Firewall settings.
Unfortunately the documentation does not mention which ports are required between cluster nodes to be able to sync/connect properly. For now I allowed both nodes to talk without restriction with each other...