kb940349 which is an update rollup for a number of VSS issues. Two reboots later I had two healthy agents.
Lets take a look at the firewall rules that were created as part of that step.
I loaded Group Policy management, created a new GPO named DPM Firewall Rule GPO and navigated to the inbound rules section.
So the final three rules I ended up with were as in the screenshot below.