Symptom
Error Message while attempting a asset scan "Cannot connect to WMI Service. It might be stopped or firewalled" can indicate that the neccessary ports for an Asset scan are not accessible from the Protect Console to the Target Workstation.
Solution
When performing an asset scan, Windows Management Instrumentation (WMI) service must be enabled on the target machine and the protocol allowed to the machine (TCP port 135).
In addition to the WMI port, other ports are necessary for an Asset scan to work properly. Refer to the following document Port Requirement for Shavlik Protect:
http://community.shavlik.com/docs/DOC-2161 to ensure all appropriate ports are open in the firewall.