Company acquisitions bring new challenges to environments. Such was the case with two servers which are used to test McAfee with the companies product. These servers were moved from a public area to a hardened site. They used to walk up and login when needed but now they could only use remote desktop. They reported the servers were down.
The McAfee fire was setup with a basic configuration and blocked ICMP and but did not block remote desktop.
Ping was enabled and on further review port 3389 needed to be enabled for TCP.