In a c2s vpn setup, I have authorized the udp protocol for allowing dns
lookups. Is this also necessary for the slp protocol?
When will it exactly be used?; In other words how do I verify that these
addresses are actually used?

Is it sufficient to allow tcp/427 or is it better to allow udp for the
whole server services the slp directory agent?