I agree with Keosaki. Many errors on E2K7 CCR with Windows Firewall on. Especially when performing a cluster failover: I think the cluster service wants to dynamically map RPC ports which are being blocked by Windows Firewall.
"The fact that there is no support for using firewalls between Exchange servers (except for the Edge role) sometimes causes confusion for how to use the Windows OS firewall on Exchange. It is supported to have the Windows OS firewall turned on for Exchange servers.": Sure, there are differences between a hardware FW and Windows FW but their functionality is the same. Is there documentation on how to configure E2K7 CCR with Windows FW on while performing a failover without errors?
Regards, Martijn