And Nick, just to add to what Tony has written above........you only have TWO Options per Application / Process
i.e. "Allow" or "Block" Incoming Connections
The options are different to typical Windows Firewall settings
The "Automatically Allow Signed Software" only allows "Signed" or "Recognized" Apps to accept connections automatically, i.e. without asking the User
ControlMac, SooloosHelper and Sync Companion are not "Signed" and one has to allow these as part of the ControlMac setup
Let's see what Tony says happens with the Firewall disabled completely