This issue occurs because when you install the OfficeScan server, you cannot add OfficeScan to Windows Firewall > Allowed Program list > domain profile. The domain profile does not exist until the machine joins the domain.

However, after the machine joins the domain, it switches to the Domain profile and therefore, the web console cannot be accessed and the OfficeScan server service cannot be connected.

Depending on your server platform, follow the steps below:

For OfficeScan servers on a Windows 2008 server

1. Go to Control Panel > System and Security > Windows Firewall > Exceptions tab.
2. Enable the exceptions for File and Printer Sharing.
3. Add the following port exceptions:
   • Trend Micro Local Web Classification Server HTTP, tcp port 5274
   • Trend Micro OfficeScan Server HTTP, tcp port 8080
   • Trend Micro OfficeScan Server HTTPS, tcp port 4343
   • Trend Micro Smart Scan Server (Integrated) HTTP, tcp port 8082
   • Trend Micro Smart Scan Server (Integrated) HTTPS, tcp port 4345
4. Click OK.

For OfficeScan servers running on Windows 2008 R2

1. Go to Control Panel > System and Security > Windows Firewall > Allowed Programs.
2. Allow the following features in the Domain profile:
   • File and Printer Sharing
   • Trend Micro Local Web Classification Server HTTP
   • Trend Micro OfficeScan Server HTTP
   • Trend Micro Smart Scan Server (Integrated) HTTP
   • Trend Micro Smart Scan Server (Integrated) HTTPS
3. Click OK.