When the probe is installed on a different machine to the Microsoft SCOM 2012 Root Management Server (RMS) host, you must configure any intervening firewall to allow communication between the two hosts.
To enable communication between the probe and the RMS, configure the firewall to allow the probe to connect to TCP port 5724 on the RMS host machine.
If you configure the probe for peer-to-peer failover, you must configure the firewall to allow connections to the peer probe using the port values specified by the PeerPort property.
To use the probe's command line interface (CLI), you must configure the firewall to allow connections to the port specified by the CommandPort property. If you are using a second instance of the probe in a failover configuration, you must also configure the firewall to allow connections to the port specified by the PeerCommandPort property.