We have run into an interoperability problem with ZENworks Configuration
Manager (ZCM) and BorderManager (BM). The TID is 7000977.

The resolution is:

Under Internet Explorer > Tools > Internet Options > Connections > LAN
Settings check if a proxy is set. If so, check that either:

The proxy server will forward traffic to port 2645
That you create an exception for the ZENworks server in the proxy
configuration so that the authentication request goes directly to the
ZENworks server.

My question is how do we get this to work without having to visit each
workstation. Are there filter exceptions we need to build? Is there some
tweaks we need to make to BM to get this working reliably?