Endpoint Protection

Can someone let me know how to create a rule for the firewall that allows connections using WMI/wbemtest?
basically making remote calls to WMI on the machine.

Thank You

What exactly is it that you want to do?
WMI is a very broad term. 
Whenever a WMI RPC is called, depending on the application and the way it was coded, the call will go to the appropriate port.  Generally ports 135, 137 and 445 need to remain open.  From there, your WMI RPC can use any port in the range of 1024 to 65535.  Obviously leaving every port open defeats the purpose of the firewall itself.

Start by identifying the following:
- When connecting are you receiving an error message?  What is it?
- What error messages (numbers/codes) are you receiving in the "CCM.log" ?
- Have you enabled "Distributed COM on this computer"?  (Admin. Tools -> Comp. Serv. -> Computers (right click) -> Properties) 
- Have you ever been able to connect before?
- Have you tried to identify the ports you might need to open? 
Step 1. Shut down/uninstall/disable the firewall and test internally and identify ports
Step 2.  Shut down all unnecessary applications
Step 3. Start -> Run -> "netstat -a > c:\first.txt"
Step 4. Establish your WBEMTEST session (successfully, no errors)
Step 5. Start -> Run -> "netstat -a > c:\second.txt"
Step 6. Identify the differences between the 2 output files.  The difference will indicate to you the ports in use for the session(s) you are trying to establish and open your Hardware (if applicable) and Software (if applicable) firewall ports as necessary and as identified. 

Here's what I want to achieve.

Start > Run > wbemtest.
connect to \\machine\root\cimv2

Where machine is a computer with SEP NTP installed.

In windows firewall, this can be achieved with a simple firewall rule. I think it's "enable remote administration"

I'm aware of the port range that WMI connections use, but I was hoping Symantec did something simple to achieve this.
With SCS, I had one of my servers in the trusted zone, so that I can remotely access WMI on my workstations.

I mainly need this for SMS 2003 administration (using SMS client center, and certain right-click tools)