Three firewall exclusions are needed for the ITM client to work properly for the phone home, av updates, and policy distribution etc, they need to be added to the windows firewall.
eTrust ITM – Realtime monitor — c:\program files\ca\etrustitm\realmon.exe
eTrust ITM – RPC Service — c:\program files\ca\etrustitm\inorpc.exe
eTrust ITM – Shell Scanner — c:\program files\ca\etrustitm\shellscn.exe