Per one of the google threads, there aren't static ports for WMI - randomly assigned port between 1024-65535(TCP) for Windows 2003 and older, and 49152 - 65535(TCP) for Windows 2008... you must allow those ports from the Zenoss server or collector. I'd just allow all connections from the Zenoss server myself.
--
James Pulver
ZCA Member
LEPP Computer Group