Port TCP 5100 is required to be open between all DMAs in order to make use of particular cloud functionalities. This is expected to be handled automatically after an upgrade, by checking if an appropriate Windows Firewall inbound rule is present, and if not, by adding it.

I notice on a system that this rule was not present on any of the DMAs.

Checking the ConfigureFIrewall.bat file, I can see the correct rule is specified, and after executing manually, the rule gets added.

I wonder why this did not happen automatically?

Also strange is that the BPA which checks firewall config is not reporting any problems, even though it's also supposed to check for port 5100.