To resolve the issue either
On the protected machine, open Control Panel and Windows Firewall. Disable firewall for all profiles
Or, if firewall must be enabled, do the following on the protected agent server:
- open Control Panel
- Windows Firewall with Advanced Security (or just Windows Firewall, click on Advanced)
- select Inbound Rules
- click on New Rule
- choose Custom, click Next
- choose All Programs, Next
- select TCP in Protocol Type
- select RPC Dynamic Ports as the Local Port and click Next
- specify the IP address of the Core server on the remote IP addresses list or choose Any IP address and then click Next
- select Allow the connection and click Next.
- select the checkboxes that fulfil the machine connection conditions and click Next.
- type name of the new rule (for example: dynamic RPC ports) and click Finish
Attempt to protect the server again (make sure that protection dialog window is closed and re-opened)
